CVE · Medium

CVE-2025-68494 — Premium Addons for Elementor – Elementor Templates, Widgets & MCP Tools [premium-addons-for-elementor] < 4.11.54

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-68494 Premium Addons for Elementor – Elementor Templates, Widgets & MCP Tools [premium-addons-for-elementor] < 4.11.54 Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium 5.3 < 4.11.54 4.11.54 2025-12-04

CVE-2025-68494

The Premium Addons for Elementor plugin, which includes templates and widgets for WordPress, has a vulnerability that allows unauthenticated users to expose sensitive information up to version 4.11.53. Attackers can access critical data such as user details or configurations without needing authentication.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.