Cross-site Scripting Vulnerability in Easy Elementor Addons by Hashthemes

CVE-2025-54704

What is CVE-2025-54704?

The Easy Elementor Addons plugin by Hashthemes is vulnerable to a cross-site scripting (XSS) flaw. This vulnerability stems from improper neutralization of user input during web page generation, potentially allowing an attacker to execute arbitrary JavaScript in the context of the user's browser. If exploited, this could lead to unauthorized actions on behalf of the user, compromising sensitive information and site integrity. The vulnerability affects versions from n/a through 2.2.6, making it imperative for users to review their settings and update to the latest version.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References