Stored Cross-Site Scripting Vulnerability in RT Easy Builder - Advanced Addons for Elementor Plugin

CVE-2025-8462

What is CVE-2025-8462?

The RT Easy Builder – Advanced Addons for Elementor plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping in the handling of the social URL parameter. This vulnerability allows authenticated attackers with Contributor-level access or higher to inject malicious web scripts into pages. These scripts can be executed when users navigate to the compromised pages, posing significant security risks to users and websites leveraging this plugin.

References