Authorization Flaw in WPDeveloper's Essential Addons for Elementor Plugin
CVE-2025-64352

2.7LOW

Key Information:

Vendor

WordPress
Status
Essential Addons For Elementor
Vendor
CVE Published:
31 October 2025

What is CVE-2025-64352?

A missing authorization vulnerability exists in the WPDeveloper Essential Addons for Elementor plugin, allowing attackers to exploit incorrectly configured access control security levels. This flaw affects the plugin versions up to and including 6.2.4, potentially exposing sensitive functionalities that require proper authentication. Users are advised to review their configurations and update to the latest version to mitigate risks associated with unauthorized access.

Affected Version(s)

Essential Addons for Elementor <= n/a

References

https://vdp.patchstack.com/database/Wordpress/Plugin/esse...
vdb-entry

CVSS V3.1

Score:
2.7
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Peter Thaleikis | Patchstack Bug Bounty Program
JSON
.
CVE-2025-64352 : Authorization Flaw in WPDeveloper's Essential Addons for Elementor Plugin