Skip to content
OpenAdvisories
Medium · 5.7 CVE-2025-2228 EUVD-2025-8132GHSA-5fh9-9r47-g22w

Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates <= 1.6.8 - Authenticated (Contributor+) Sensitive Information Exposure

Published Mar 26, 2025 · Updated Apr 8, 2026 · Assigned by Wordfence

Description

The Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.8 the 'register_user' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including usernames and passwords of any users who register via the Edit Login | Registration Form widget, as long as that user opens the email notification for successful registration.

Affected products

VendorProductAffectedFixed
cyberchimps Responsive Addons for Elementor – Free Elementor Addons, Kits and Elementor Templates ≤ 1.6.8 —

References