CVE-2025-31857

Summary

CVE-2025-31857 is a Cross-site Scripting (XSS) vulnerability affecting the wpWax Directorist AddonsKit for Elementor plugin. The flaw, identified as Stored XSS, occurs during the improper neutralization of user inputs in web page generation. Attackers can exploit this vulnerability to inject malicious scripts into web pages viewed by other users, potentially leading to theft of sensitive information or unauthorized actions. Affected versions of the plugin range from n/a to 1.1.6. It is strongly recommended that users update to the latest, secure version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.