CVE-2025-24752

🗓️ 17 Apr 2025 15:48:11Reported by PatchstackType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 215 Views🌐 WEB

Cross-site scripting vulnerability in WPDeveloper Essential Addons for Elementor affects versions up to 6.0.14.

Reporter	Title	Published	Views	Family All 19
GithubExploit	Exploit for CVE-2025-24752	26 Feb 202509:28	–	githubexploit
GithubExploit	Exploit for CVE-2025-24752	1 Mar 202508:25	–	githubexploit
Circl	CVE-2025-24752	25 Feb 202520:55	–	circl
CNNVD	WordPress plugin Essential Addons for Elementor: Cross-site scripting vulnerabilities	17 Apr 202500:00	–	cnnvd
Cvelist	CVE-2025-24752 WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability	17 Apr 202515:48	–	cvelist
EUVD	EUVD-2025-11615	3 Oct 202520:07	–	euvd
Kitploit	CVE-2025-24752-POC	31 Oct 202621:07	–	kitploit
Kitploit	essential-addons-for-elementor-xss-poc	1 Nov 202604:10	–	kitploit
NVD	CVE-2025-24752	17 Apr 202516:15	–	nvd
osv_cve	CVE-2025-24752	17 Apr 202516:15	–	osv_cve

NVD

Vulners

Node

wpdeveloper essential_addons_for_elementorRange<6.0.15litewordpress

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "essential-addons-for-elementor-lite",
    "product": "Essential Addons for Elementor",
    "vendor": "WPDeveloper",
    "versions": [
      {
        "changes": [
          {
            "at": "6.0.15",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "6.0.14",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/Wordpress/Plugin/essential-addons-for-elementor-lite/vulnerability/wordpress-essential-addons-for-elementor-plugin-6-0-14-reflected-cross-site-scripting-xss-vulnerability

Parameter	Position	Path	Description	CWE
popup-selector	query param	/?popup-selector=&eael-lostpassword=1	Reflected cross-site scripting via the popup-selector query parameter in Essential Addons for Elementor (CVE-2025-24752, affected versions <= 6.0.14).	CWE-79