5.3
Moyenne
CVE-2025-10873 The ElementInvader Addons for Elementor WordPress plugin before 1.4.1 allows unauthenticated user to send arbitrary…
Description
The ElementInvader Addons for Elementor WordPress plugin before 1.4.1 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses due to missing authorization on the elementinvader_addons_for_elementor_forms_send_form action.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ElementInvader Addons for Elementor 1.4 | premières → < 1.4.1 | 1.4.1 |