Unauthorized Plugin Installation Vulnerability in Animation Addons for Elementor Pro by WordPress

CVE-2025-1639

Summary

The Animation Addons for Elementor Pro plugin presents a serious security issue due to the absence of a capability check within the install_elementor_plugin_handler() function. This vulnerability affects all versions up to and including 1.6, allowing authenticated users with Subscriber-level access or higher to install and activate any arbitrary plugins. This exploit can facilitate further attacks, particularly when Elementor is not active on the targeted website, making it crucial for administrators to implement immediate security measures.

References