CVE-2025-64352

Low

Description

Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Addons for Elementor: from n/a through <= 6.2.4.

SeverityLow
CVSS2.7
Exploit probability—
ProductWpdeveloper Essential Addons For Elementor
PublishedOct 31, 2025
First seenOct 31, 2025

How to fix

Update
  • wpdeveloper essential_addons_for_elementor6.3.0 or later

Affected products

ProductAffected versionsFixed in
wpdeveloper essential_addons_for_elementorv < 6.3.06.3.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.