CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-39590 | Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.1.10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 6.1.10 | 6.1.10 | 2025-04-16 | — |
The Essential Addons for Elementor plugin on WordPress is susceptible to stored cross-site scripting (XSS) attacks in versions 6.1.9 and earlier. Insufficient input sanitization and output escaping allow attackers with contributor or higher privileges to inject malicious scripts that can be executed when other users view the affected pages.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.