CVE-2025-46472

Summary

CVE-2025-46472 is a Cross-site Scripting (XSS) vulnerability affecting The Pack Elementor addons for WordPress. The issue stems from improper neutralization of user input during web page generation. An attacker can exploit this flaw to inject malicious scripts into web pages viewed by other users, potentially stealing sensitive information or gaining unauthorized access. The vulnerability affects The Pack Elementor addons from an unknown version up to and including 2.1.2. It is recommended that users upgrade to the latest version or disable the affected plugins as a temporary measure until a patch is released.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.