cleantalk
Vulnerabilities and Security Researches

Enter Addons – Ultimate Template Builder for Elementor, CVE-2026-25014

CVE, Research URL

CVE-2026-25014

Home page URL

Security reports for Enter Addons – Ultimate Template Builder for Elementor

Application

Enter Addons – Ultimate Template Builder for Elementor

Published on
Feb 03, 2026
Research Description
Cross-Site Request Forgery (CSRF) vulnerability in themelooks Enter Addons enteraddons allows Cross Site Request Forgery.This issue affects Enter Addons: from n/a through <= 2.3.2.
Affected versions
max 2.3.2.
Status
vulnerable
Previous vulnerability researches
Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress (CVE-2024-39631) , Jul 28, 2024
Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress (CVE-2024-11103) , Nov 29, 2024
Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress (CVE-2025-7725) , Aug 02, 2025
Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress (CVE-2025-22693) , Feb 04, 2025
Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress (CVE-2022-4157) , Jun 07, 2024
New vulnerability
Image Photo Gallery Final Tiles Grid (CVE-2026-25375) , Feb 28, 2026
Share This Image (CVE-2026-25010) , Feb 28, 2026
Bold Page Builder (CVE-2026-25451) , Feb 28, 2026
Bold Page Builder (CVE-2025-13463) , Feb 28, 2026
Bold Page Builder (CVE-2025-12159) , Feb 28, 2026