CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-49076 | The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder] < 6.2.8 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 6.2.8 | 6.2.8 | 2025-05-30 | — |
The Plus Addons for Elementor Page Builder Lite plugin's security has been compromised by a critical flaw in versions 6.2.7 and earlier. This weakness arises from the plugin's failure to properly scrub user input, creating an opening for malicious scripts to be embedded within pages that will run whenever users visit those specific pages.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.