CVE-2025-9698medium

CVE-2025-9698: medium-severity vulnerability in The Plus Addons for Elementor

The Plus Addons for Elementor < 6.3.16 - Author+ Stored XSS

Published · Updated

Follow this CVE+ Monitor The Plus Addons for Elementor

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.8epss 0.3%
The Plus Addons for Elementor WordPress plugin before 6.3.16 does not sanitize SVG file contents, which could allow users with minimum role access as Author to perform Stored Cross-Site Scripting attacks.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Affected products
Unknown · The Plus Addons for Elementor