CVE-2023-7044

Summary

CVE-2023-7044 is a stored Cross-Site Scripting (XSS) vulnerability affecting the Essential Addons for Elementor plugin for WordPress. This issue, which exists up to version 5.9.2, allows authenticated attackers with contributor access or higher to inject malicious scripts into custom ID fields. As a result, the injected scripts will execute whenever a user visits an affected page, posing a significant security risk. The root cause of this vulnerability is insufficient input sanitization and output escaping, which have left the plugin open to exploitation. WordPress users are strongly advised to update the plugin to the latest version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.