5.3
Medium
CVE-2025-10873 The ElementInvader Addons for Elementor WordPress plugin before 1.4.1 allows unauthenticated user to send arbitrary…
Description
The ElementInvader Addons for Elementor WordPress plugin before 1.4.1 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses due to missing authorization on the elementinvader_addons_for_elementor_forms_send_form action.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ElementInvader Addons for Elementor 1.4 | earliest → < 1.4.1 | 1.4.1 |