CVE-2025-14155: Premium Addons for Elementor <= 4.11.53 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'get_template_content'
The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'gettemplatecontent' function in all versions up to, and including, 4.11.53. This makes it possible for unauthenticated attackers to view the content of private, draft, and pending templates.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14155?
CVE-2025-14155 has a high severity due to the potential for unauthorized access to sensitive data.
How do I fix CVE-2025-14155?
To fix CVE-2025-14155, update the Premium Addons for Elementor plugin to version 4.11.54 or later.
Who is impacted by CVE-2025-14155?
All users of the Premium Addons for Elementor plugin for WordPress using versions up to and including 4.11.53 are impacted by CVE-2025-14155.
What kind of vulnerability is CVE-2025-14155?
CVE-2025-14155 is an access control vulnerability due to a missing capability check in the plugin.
Where can I find more information about CVE-2025-14155?
More information about CVE-2025-14155 can typically be found in the security advisories released by the plugin developer.