CVE Database /
CVE-2025-55712
CVE · Medium
CVE-2025-55712 — The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder] < 6.3.14
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-55712
|
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder] < 6.3.14 |
Missing Authorization |
Medium
6.5
|
< 6.3.14
|
6.3.14 |
2025-08-14 |
—
|
CVE-2025-55712
The Elementor Addons plugin has a security flaw that allows users with at least Contributor permissions to bypass intended restrictions on certain actions. The issue arises from inadequate verification of user capabilities in the affected versions up to 6.3.13. This vulnerability enables attackers to carry out unauthorized operations within the WordPress site.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings