CVE-2025-9698

The Plus Addons for Elementor WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 6.3.16 . The root cause is the failure to properly sanitize SVG file contents , which allows users with Author-level access or higher to execute malicious scripts. To mitigate th...