CVE-2025-8564

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-8564", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-08-04T19:44:16.833Z", "datePublished": "2025-09-06T03:22:37.236Z", "dateUpdated": "2026-04-08T17:06:08.833Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:06:08.833Z"}, "affected": [{"vendor": "sonalsinha21", "product": "SKT Addons for Elementor", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.7", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The SKT Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 3.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."}], "title": "SKT Addons for Elementor <= 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/8d182c47-3840-4ab7-a4b8-cfaf02586a5b?source=cve"}, {"url": "https://wordpress.org/plugins/skt-addons-for-elementor/#developers"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3347016%40skt-addons-for-elementor&new=3347016%40skt-addons-for-elementor&sfp_email=&sfph_mail="}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "cweId": "CWE-79", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "baseScore": 6.4, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "D.Sim"}], "timeline": [{"time": "2025-08-06T06:38:43.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-09-05T15:12:26.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-09-08T13:52:51.310617Z", "id": "CVE-2025-8564", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-08T14:05:14.558Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-8564", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-08T13:52:51.310617Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-08T13:52:53.920Z"}}], "cna": {"title": "SKT Addons for Elementor <= 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets", "credits": [{"lang": "en", "type": "finder", "value": "D.Sim"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 6.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"}}], "affected": [{"vendor": "sonalsinha21", "product": "SKT Addons for Elementor", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "3.7"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-08-06T06:38:43.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-09-05T15:12:26.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/8d182c47-3840-4ab7-a4b8-cfaf02586a5b?source=cve"}, {"url": "https://wordpress.org/plugins/skt-addons-for-elementor/#developers"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3347016%40skt-addons-for-elementor&new=3347016%40skt-addons-for-elementor&sfp_email=&sfph_mail="}], "descriptions": [{"lang": "en", "value": "The SKT Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 3.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:06:08.833Z"}}}, "cveMetadata": {"cveId": "CVE-2025-8564", "state": "PUBLISHED", "dateUpdated": "2026-04-08T17:06:08.833Z", "dateReserved": "2025-08-04T19:44:16.833Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-09-06T03:22:37.236Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "SKT Addons for Elementor", "vendor": "sonalsinha21", "versions": [{"lessThanOrEqual": "3.7", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The SKT Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 3.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."}], "id": "CVE-2025-8564", "lastModified": "2026-06-17T10:07:14.500", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 2.7, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-8564", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-09-08T13:52:51.310617Z", "version": "2.0.3"}}]}, "published": "2025-09-06T04:16:07.120", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3347016%40skt-addons-for-elementor&new=3347016%40skt-addons-for-elementor&sfp_email=&sfph_mail="}, {"source": "security@wordfence.com", "url": "https://wordpress.org/plugins/skt-addons-for-elementor/#developers"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/8d182c47-3840-4ab7-a4b8-cfaf02586a5b?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-21T19:11:02.257245+00:00", "value": {"mitigation_remediation": ["Update SKT Addons for Elementor to version 3.8 or later to remove the stored\u2011XSS flaw.", "If an immediate update is not possible, disable the affected widgets or revoke contributor privileges until the plugin can be patched, then inspect site content for and manually remove any injected scripts.", "Run a comprehensive site scan for malicious code, enforce a content\u2011security policy, and monitor for unauthorized script execution to ensure the vulnerability has been resolved."], "summary": {"action": "Apply Patch", "impact": "Stored Cross\u2011Site Scripting (XSS)"}, "threat_synthesis": {"affected_systems": "All WordPress installations that use the SKT Addons for Elementor plugin, authored by sonalsinha21, and run any version up to and including 3.7 are affected. Users with contributor\u2011level or higher access are required to exploit the flaw.", "description_and_impact": "The SKT Addons for Elementor plugin is vulnerable to stored cross\u2011site scripting through multiple widgets because it fails to properly sanitize or escape user supplied attributes. For authenticated users with contributor-level privileges or higher, malicious code can be injected into page content that executes whenever other visitors load the affected page, allowing unintended script execution in the context of site visitors.", "risk_and_exploitability": "The CVSS score of 6.4 indicates a moderate risk level. The EPSS score of less than 1% signals a low probability of current exploitation. The vulnerability is not listed in CISA\u2019s KEV catalog. Attack requires authenticated access with contributor privileges, making the threat conditional on user roles and site configuration."}}}}, "created": "2025-09-08T15:17:43.291316+00:00", "updated": "2026-04-21T19:15:26.039309+00:00", "vendors": ["elementor", "elementor$PRODUCT$elementor", "sonalsinha21", "sonalsinha21$PRODUCT$skt_addons_for_elementor", "wordpress", "wordpress$PRODUCT$wordpress"]}