UpHeron
All vulnerabilities

WordPress plugins

CVE-2025-8444

Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates <= 4.2.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Parameters

Severity
Medium 6.4
Published
10 Jun 2026
Last changed
30 Oct 2026
Added to UpHeron
30 Oct 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
Animation Addons For Elementor (WordPress plugin)WordPress plugins · wp-plugin:animation-addons-for-elementor
  • Every version up to 4.2.6

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-8444