CVE-2025-3813

creationtimestamp| type| source ---|---|--- 2025-05-31 08:40:33+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqhdxvdlopp2 2025-05-31 11:42:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqho5qhyhw2m...

CVE-2025-3813 Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘elementordata’ parameter in all versions up to, and including, 1.7.1020 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...