Stored Cross-Site Scripting Vulnerability in Rife Elementor Extensions & Templates for WordPress
CVE-2024-13564
5.4MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 22 February 2025
What is CVE-2024-13564?
The Rife Elementor Extensions & Templates plugin for WordPress is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to inadequate input sanitization and output escaping on user-supplied attributes within the Writing Effect Headline shortcode. As a result, authenticated attackers with contributor-level access and above can exploit this flaw to inject malicious web scripts into pages, which will execute whenever a user visits an impacted page.
Affected Version(s)
Rife Elementor Extensions & Templates * <= 1.2.5