CVE-2026-125435: WordPress PowerPack Addons for Elementor plugin <= 3.1.3 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects PowerPack Addons for Elementor: from n/a through 3.1.3.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress PowerPack Addons for Elementorto a version that resolves this vulnerability.Fixed in 3.1.4
Event History
Frequently Asked Questions
Which installations are affected?
PowerPack Addons for Elementor installations running versions through 3.1.3 are affected. The affected version range begins at an unspecified earlier version.
What does an attacker need to exploit this issue?
The CVSS vector indicates it can be exploited remotely over the network with low attack complexity, without authentication or user interaction.
What is the security impact?
The issue may allow retrieval of embedded sensitive data. The stated impact is limited to confidentiality; no integrity or availability impact is listed.