cleantalk
Vulnerabilities and Security Researches

The Plus Addons for Elementor, CVE-2025-49076

CVE, Research URL

CVE-2025-49076

Home page URL

Security reports for The Plus Addons for Elementor

Application

The Plus Addons for Elementor

Published on
Jun 06, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Innovations The Plus Addons for Elementor Page Builder Lite allows Stored XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through 6.2.7.
Affected versions
Min -, max 6.2.8.
Status
vulnerable
Previous vulnerability researches
Shared Files – Advanced File Sharing & Download Manager with Frontend Uploads & Lead Generation (CVE-2024-43230) , Aug 13, 2024
Shared Files – Advanced File Sharing & Download Manager with Frontend Uploads & Lead Generation (CVE-2022-4974) , Nov 14, 2024
Shared Files – Advanced File Sharing & Download Manager with Frontend Uploads & Lead Generation (CVE-2021-24856) , Jun 07, 2024
Shared Files – Advanced File Sharing & Download Manager with Frontend Uploads & Lead Generation (CVE-2021-24736) , Jun 07, 2024
Shared Files – Advanced File Sharing & Download Manager with Frontend Uploads & Lead Generation (CVE-2023-4819) , Jun 07, 2024
New vulnerability
The Plus Addons for Elementor (CVE-2025-49076) , Jun 06, 2025
WP Pipes (CVE-2025-48267) , Jun 06, 2025
Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, (CVE-2025-5292) , Jun 06, 2025
Newsletters (CVE-2025-4857) , Jun 06, 2025
Royal Elementor Addons and Templates (CVE-2025-3813) , Jun 06, 2025