Stored Cross-Site Scripting in Ultimate Addons for WPBakery Plugin

CVE-2025-11814

What is CVE-2025-11814?

The Ultimate Addons for WPBakery plugin for WordPress suffers from a stored cross-site scripting vulnerability due to inadequate input validation and output escaping. This flaw allows unauthenticated attackers to inject and execute arbitrary web scripts on pages viewed by users, posing significant risks to data integrity and user security. It is crucial for users of this plugin to ensure they are using updated versions and to be vigilant about potential exploitation.

References