Stored Cross-Site Scripting Vulnerability in Responsive Addons Plugin for WordPress

CVE-2025-8215

What is CVE-2025-8215?

The Responsive Addons for Elementor plugin for WordPress suffers from a Stored Cross-Site Scripting vulnerability that affects all versions up to and including 1.7.4. This security issue arises from inadequate input sanitization and output escaping for user-supplied attributes across multiple widgets. Authenticated attackers with contributor-level access and higher can exploit this flaw to inject arbitrary scripts, which will execute in the context of users accessing the manipulated pages. As a result, this vulnerability poses a significant risk to the integrity and security of websites using the affected plugin.

References