CVE-2025-39590: WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Stored XSS.This issue affects Essential Addons for Elementor: from n/a through <= 6.1.9.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39590?
CVE-2025-39590 is rated as a high-severity vulnerability due to its potential for exploitation via stored cross-site scripting (XSS).
How do I fix CVE-2025-39590?
To fix CVE-2025-39590, update the Essential Addons for Elementor plugin to version 6.1.10 or higher, which addresses the XSS issue.
What type of vulnerability is CVE-2025-39590?
CVE-2025-39590 is an improper neutralization of input during web page generation vulnerability, commonly known as stored XSS.
Which versions of Essential Addons for Elementor are affected by CVE-2025-39590?
CVE-2025-39590 affects Essential Addons for Elementor versions from n/a up to 6.1.9.
Who is the vendor for CVE-2025-39590?
The vendor for CVE-2025-39590 is WPDeveloper, responsible for the Essential Addons for Elementor plugin.