CVE Database /
CVE-2025-68494
CVE · Medium
CVE-2025-68494 — Premium Addons for Elementor – Elementor Templates, Widgets & MCP Tools [premium-addons-for-elementor] < 4.11.54
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-68494
|
Premium Addons for Elementor – Elementor Templates, Widgets & MCP Tools [premium-addons-for-elementor] < 4.11.54 |
Exposure of Sensitive System Information to an Unauthorized Control Sphere |
Medium
5.3
|
< 4.11.54
|
4.11.54 |
2025-12-04 |
—
|
CVE-2025-68494
The Premium Addons for Elementor plugin, which includes templates and widgets for WordPress, has a vulnerability that allows unauthenticated users to expose sensitive information up to version 4.11.53. Attackers can access critical data such as user details or configurations without needing authentication.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings