CVE-2025-58195: WordPress Xpro Elementor Addons Plugin <= 1.4.17 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS. This issue affects Xpro Elementor Addons: from n/a through 1.4.17.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Stored XSS.This issue affects Xpro Elementor Addons: from n/a through <= 1.4.17.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58195?
CVE-2025-58195 is classified as a medium severity vulnerability due to the potential for Stored Cross-site Scripting (XSS).
How do I fix CVE-2025-58195?
To fix CVE-2025-58195, you should update the Xpro Elementor Addons to the latest version that addresses this vulnerability.
What are the consequences of CVE-2025-58195?
The consequences of CVE-2025-58195 include the potential for attackers to execute malicious scripts in the context of another user's session, leading to data theft or session hijacking.
Which versions of Xpro Elementor Addons are affected by CVE-2025-58195?
CVE-2025-58195 affects all versions of Xpro Elementor Addons up to and including version 1.4.17.
Is CVE-2025-58195 related to WordPress?
Yes, CVE-2025-58195 specifically affects the WordPress plugin Xpro Elementor Addons.