Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-22316 EUVD-2025-2716GHSA-gffx-5j8v-v6xp

WordPress WPBITS Addons For Elementor Page Builder plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability

Published Jan 7, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbits WPBITS Addons For Elementor Page Builder wpbits-addons-for-elementor allows Stored XSS.This issue affects WPBITS Addons For Elementor Page Builder: from n/a through <= 1.5.1.

Affected products

VendorProductAffectedFixed
wpbits WPBITS Addons For Elementor Page Builder ≤ 1.5.1 —

References