CVE-2025-9703

creationtimestamp| type| source ---|---|--- 2025-10-06 07:06:13+00:00| seen| Telegram/i3q0vMKCDIla2eNho79EjUWpbx5iiLx7Ye20IENVE0zlQyY...

CVE-2025-9703 Ultimate Addons for Elementor Lite < 2.5.0 - Author+ Stored XSS

The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder WordPress plugin before 2.5.0 does not sanitize SVG file contents when uploaded through the xmlrpc.php endpoint using base64 encode, leading to a Cross-Site Scripting vulnerability...