Medium · 4.3 CVE-2025-60167 EUVD-2025-31238GHSA-pw2r-7c4v-9559

WordPress Page Manager for Elementor Plugin <= 2.0.5 - Sensitive Data Exposure Vulnerability

Published Sep 26, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: honzat Product: Page Manager for Elementor

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in honzat Page Manager for Elementor page-manager-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Page Manager for Elementor: from n/a through <= 2.0.5.

Affected products

Vendor	Product	Affected	Fixed
honzat	Page Manager for Elementor	≤ 2.0.5	—

References

https://patchstack.com/database/Wordpress/Plugin/page-manager-for-elementor/vulnerability/wordpress-page-manager-for-elementor-plugin-2-0-5-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry