Cross-site Scripting Vulnerability in WPB Elementor Addons by WPBean

CVE-2025-58793

What is CVE-2025-58793?

The WPB Elementor Addons by WPBean is affected by a Cross-site Scripting (XSS) vulnerability due to improper input neutralization during web page generation. This flaw enables attackers to exploit the application by storing malicious scripts that could be executed in the user's web browser. As a result, sensitive user data can be compromised, potentially leading to unauthorized access and other severe security incidents. The vulnerability impacts versions prior to 1.6 and highlights the critical need for prompt updates to safeguard against potential exploitation.

References