PT-2025-41756 · WordPress · The Plus Addons For Elementor

Tan Nguyen · Publicado 2025-10-13 · Atualizado 2025-10-14 · CVE-2025-9698

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Plus Addons for Elementor versions prior to 6.3.16

Description The Plus Addons for Elementor WordPress plugin does not properly sanitize SVG file contents. This could allow users with Author-level access or higher to execute Stored Cross-Site Scripting attacks.

Recommendations Update to version 6.3.16 or later.

Exploit

Correção

Identificadores relacionados

CVE-2025-9698

Produtos afetados

The Plus Addons For Elementor

Referências · 5

• 🔥 https://wpscan.com/vulnerability/a9539def-d92b-4117-b36a-17015c578d89 · Exploit
• https://t.me/cveNotify/138685 · Publicação no Telegram
• https://t.me/CVEtracker/34747 · Publicação no Telegram
• https://t.me/cveNotify/138419 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-9698 · Nota de Segurança