CVE-2025-30812

Summary

CVE-2025-30812 is a Cross-site Scripting (XSS) vulnerability affecting SKT Addons for Elementor, as identified by the name. The issue stems from improper neutralization of user input during webpage generation. An attacker can exploit this flaw to inject malicious scripts, leading to Stored XSS attacks. The vulnerability spans from version n/a through 3.5 of the add-on for the popular WordPress plugin, Elementor. This vulnerability poses a significant risk as it can allow unauthorized script execution, potentially leading to data theft, unauthorized access, or website defacement. Users of the affected version of SKT Addons for Elementor are strongly urged to update as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.