Cross-Site Scripting Vulnerability in Master Addons for Elementor by Liton Arefin

CVE-2025-63055

What is CVE-2025-63055?

A vulnerability exists in the Master Addons for Elementor plugin, created by Liton Arefin, allowing for Stored Cross-Site Scripting (XSS) attacks. Attackers can potentially exploit this flaw by injecting malicious scripts, which would be executed when users interact with the affected web pages. This poses significant risks to user data integrity and security, particularly in WordPress environments. Website administrators using affected versions should take immediate action to mitigate these risks by updating to the latest version or applying necessary patches.

References