CVE-2025-69092: WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows DOM-Based XSS.This issue affects Essential Addons for Elementor: from n/a through <= 6.5.3.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-69092?
CVE-2025-69092 is categorized as a Cross-site Scripting (XSS) vulnerability, which is considered a high-severity issue due to its potential for exploitation.
How do I fix CVE-2025-69092?
To mitigate CVE-2025-69092, update the Essential Addons for Elementor plugin to a version later than 6.5.3.
What software is affected by CVE-2025-69092?
CVE-2025-69092 affects the Essential Addons for Elementor plugin from initialization through version 6.5.3.
What type of vulnerability is CVE-2025-69092?
CVE-2025-69092 is classified as a DOM-Based Cross-site Scripting vulnerability.
Can CVE-2025-69092 be exploited remotely?
Yes, CVE-2025-69092 can be exploited remotely by attackers to execute malicious scripts in the context of a victim's browser.