Stored Cross-Site Scripting in Anber Elementor Addon for WordPress

CVE-2025-7439

What is CVE-2025-7439?

The Anber Elementor Addon for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping in the 'button_link' parameter. This vulnerability allows authenticated attackers with Contributor-level access or higher to inject malicious web scripts into pages. Consequently, these scripts are executed each time a user visits any affected page, posing a significant security risk for WordPress site operators. It is crucial for users of this plugin to promptly update to newer versions that rectify this issue, safeguarding their platforms from potential exploitation.

References