Elementor · Essential Addons For Elementor · CVE-2025-24752
**Name of the Vulnerable Software and Affected Versions**
Essential Addons for Elementor (affected versions not specified)
**Description**
A critical XSS flaw has been identified in the Essential Addons for Elementor WordPress plugin, potentially placing over two million websites in jeopardy. This vulnerability can allow attackers to inject malicious scripts and execute XSS attacks. The issue is related to the src/js/view/general.js file. It is estimated that over 2 million WordPress sites are affected.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.