ElementInvader Addons for Elementor, CVE-2025-10873

CVE, Research URL: CVE-2025-10873
Home page URL: Security reports for ElementInvader Addons for Elementor
Application: ElementInvader Addons for Elementor
Published on: Nov 05, 2025
Research Description: The ElementInvader Addons for Elementor WordPress plugin before 1.4.1 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses due to missing authorization on the elementinvader_addons_for_elementor_forms_send_form action.
Affected versions: max 1.4.1.
Status: vulnerable