CVE-2025-2228mediumCWE-200

CVE-2025-2228: falha de média gravidade em cyberchimps Responsive Addons for Elementor…

Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates <= 1.6.8 - Authenticated (Contributor+) Sensitive Information Exposure

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Responsive Addons for Elementor – Free Elementor Addons, Kits and Elementor Templates

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.7epss 0.4%
The Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.8 the 'register_user' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including usernames and passwords of any users who register via the Edit Login | Registration Form widget, as long as that user opens the email notification for successful registration.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Produtos afetados
cyberchimps · Responsive Addons for Elementor – Free Elementor Addons, Kits and Elementor Templates
CVEs relacionadas — cyberchimps Responsive Addons for Elementor…

No mesmo produto, das mais perigosas para as menos.

CVE-2024-13353HIGHResponsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates <= 1.6.4 - Authenticated (Contributor+) Local File InclusionEPSS 0.7%CVE-2025-2225MEDIUMResponsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates <= 1.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'rael_title_tag'EPSS 0.3%CVE-2025-8215MEDIUMResponsive Addons for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple WidgetsEPSS 0.2%CVE-2024-13354MEDIUMResponsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%