Lucene search
K

CVE-2025-9703 Ultimate Addons for Elementor Lite < 2.5.0 - Author+ Stored XSS

๐Ÿ—“๏ธย 06 Oct 2025ย 06:00:05Reported byย WPScanTypeย 
cvelist
ย cvelist
๐Ÿ”—ย www.cve.org๐Ÿ‘ย 12ย Views

CVE-2025-9703: Elementor Lite before 2.5.0 allows base64 SVG uploads via xmlrpc.php, enabling cross site scripting.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2025-9703
6 Oct 202507:06
โ€“circl
CNNVD
WordPress plugin The Ultimate Addons for Elementor ๅฎ‰ๅ…จๆผๆดž
6 Oct 202500:00
โ€“cnnvd
CVE
CVE-2025-9703
6 Oct 202506:00
โ€“cve
EUVD
EUVD-2025-32492
6 Oct 202506:32
โ€“euvd
NVD
CVE-2025-9703
6 Oct 202506:15
โ€“nvd
Patchstack
WordPress Ultimate Addons for Elementor Lite plugin < 2.5.0 - Author+ Stored XSS vulnerability
6 Oct 202522:31
โ€“patchstack
Positive Technologies
PT-2025-40853
6 Oct 202500:00
โ€“ptsecurity
RedhatCVE
CVE-2025-9703
7 Oct 202506:09
โ€“redhatcve
Vulnrichment
CVE-2025-9703 Ultimate Addons for Elementor Lite < 2.5.0 - Author+ Stored XSS
6 Oct 202506:00
โ€“vulnrichment
Wordfence Blog
Wordfence Intelligence Weekly WordPress Vulnerability Report (September 15, 2025 to September 21, 2025)
25 Sep 202514:54
โ€“wordfence
Rows per page
[
  {
    "vendor": "Unknown",
    "product": "Ultimate Addons for Elementor (Formerly Elementor Header & Footer Builder)",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "2.5.0"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation