PT-2025-41756 · WordPress · The Plus Addons For Elementor

Tan Nguyen · Published 2025-10-13 · Updated 2025-10-14 · CVE-2025-9698

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Plus Addons for Elementor versions prior to 6.3.16

Description The Plus Addons for Elementor WordPress plugin does not properly sanitize SVG file contents. This could allow users with Author-level access or higher to execute Stored Cross-Site Scripting attacks.

Recommendations Update to version 6.3.16 or later.

Exploit

Fix

Related Identifiers

CVE-2025-9698

Affected Products

The Plus Addons For Elementor

References · 5

• 🔥 https://wpscan.com/vulnerability/a9539def-d92b-4117-b36a-17015c578d89 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-9698 · Security Note
• https://t.me/cveNotify/138685 · Telegram Post
• https://t.me/CVEtracker/34747 · Telegram Post
• https://t.me/cveNotify/138419 · Telegram Post