CVE-2025-30925

Summary

CVE-2025-30925 is a Cross-site Scripting (XSS) vulnerability affecting The Pack Elementor addons for WordPress. The issue lies in the improper neutralization of user input during web page generation, enabling attackers to inject malicious scripts into affected websites. This stored XSS vulnerability can be exploited to steal user data or take control of user sessions, posing a significant security risk. The affected versions range from n/a to 2.1.1. Users are advised to update to the latest version of The Pack Elementor addons to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.