Skip to content
OpenAdvisories
Critical · 9.6 Public exploit CVE-2025-32641 EUVD-2025-10574GHSA-wwf3-h2pc-prc7

WordPress Anant Addons for Elementor plugin <= 1.1.8 - CSRF to Arbitrary Plugin Installation vulnerability

Published Apr 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in anantaddons Anant Addons for Elementor anant-addons-for-elementor allows Cross Site Request Forgery.This issue affects Anant Addons for Elementor: from n/a through <= 1.1.8.

Affected products

VendorProductAffectedFixed
anantaddons Anant Addons for Elementor ≤ 1.1.8 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • Nxploited/CVE-2025-32641 ★ 0 · Apr 11, 2025

    Anant Addons for Elementor <= 1.1.5 CSRF to Arbitrary Plugin Installation vulnerability

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References