PT-2025-38849 · WordPress · Wpkoi Templates For Elementor

Abu Hurayra · Published 2025-09-22 · Updated 2025-09-22 · CVE-2025-57999

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions WPKoi Templates for Elementor versions through 3.4.1

Description A flaw exists in WPKoi Templates for Elementor that allows for DOM-Based Cross-site Scripting (XSS). This issue arises from improper neutralization of input during web page generation. The vulnerability could potentially allow an attacker to inject malicious scripts into web pages.

Recommendations Update WPKoi Templates for Elementor to a version later than 3.4.1.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-57999

Affected Products

Wpkoi Templates For Elementor

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-57999 · Security Note
• https://twitter.com/CVEnew/status/1970255675436736714 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/wpkoi-templates-for-elementor/vulnerability/wordpress-wpkoi-templates-for-elementor-plugin-3-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/plugin/wpkoi-templates-for-elementor/vulnerability/wordpress-wpkoi-templates-for-elementor-plugin-3-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve · Note