CVE-2025-58973: WordPress Easy Elementor Addons Plugin <= 2.2.8 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in hashthemes Easy Elementor Addons allows PHP Local File Inclusion. This issue affects Easy Elementor Addons: from n/a through 2.2.8.
Other sources
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in hashthemes Easy Elementor Addons easy-elementor-addons allows PHP Local File Inclusion.This issue affects Easy Elementor Addons: from n/a through <= 2.2.8.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58973?
CVE-2025-58973 is categorized as a critical vulnerability due to its potential for remote file inclusion and compromise of the server.
How do I fix CVE-2025-58973?
To fix CVE-2025-58973, update the Easy Elementor Addons to the latest version available beyond 2.2.8.
Which versions of Easy Elementor Addons are affected by CVE-2025-58973?
CVE-2025-58973 affects Easy Elementor Addons versions up to and including 2.2.8.
What type of vulnerability is CVE-2025-58973?
CVE-2025-58973 is an Improper Control of Filename for Include/Require Statement vulnerability that allows PHP Local File Inclusion.
Where can I learn more about CVE-2025-58973?
For more information about CVE-2025-58973, refer to security advisories and updates from HashThemes and relevant cybersecurity resources.