CVE-2025-24752

Summary

CVE-2025-24752 is a Cross-site Scripting (XSS) vulnerability affecting WPDeveloper Essential Addons for Elementor. The flaw, which allows Reflected XSS attacks, stems from improper neutralization of user input during web page generation. This issue can be exploited to inject malicious scripts into a victim's web browser, potentially leading to unauthorized access, data theft, or other malicious activities. The vulnerability affects versions of Essential Addons for Elementor from n/a through 6.0.14. It is crucial that users of these affected versions update to a patched version as soon as possible to mitigate the risk of compromise.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.