CVE-2025-24752

—

CVSS 3.1

6.1 medium

EPSS

1%p66

Published

Apr 17, 2025 (Apr 17, 2025)

Modified

Jun 17, 2026

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Reflected XSS.This issue affects Essential Addons for Elementor: from n/a through <= 6.0.14.

Vendors: wpdeveloper
Products: essential addons for elementor
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news2 stories

⚡ THN Weekly Recap: Alerts on Zero-Day Exploits, AI Breaches, and Crypto Heists

The Hacker NewsMay 6, 07:05 UTC · May 6, 2025Exploit / PoC CVE-2024-53104 CVE-2024-53197 CVE-2024-50302+25 CVEs

Essential Addons for Elementor XSS Vulnerability Discovered

Infosecurity MagazineFeb 24, 17:00 UTC · Feb 24, 2025Vulnerability CVE-2025-24752