References https://nvd.nist.gov/vuln/detail/CVE-2025-3275 https://app.opencve.io/cve/CVE-2025-3275 https://dbugs.ptsecurity.com/vulnerability/PT-2025-17355 https://github.com/advisories/GHSA-6876-67w8-32f4 https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/themesflat-addons-for-elementor/themesflat-addons-for-elementor-224-authenticated-contributor-stored-cross-site-scripting https://patchstack.com/database/wordpress/plugin/themesflat-addons-for-elementor/vulnerability/wordpress-themesflat-addons-for-elementor-plugin-2-2-5-authenticated-contributor-stored-cross-site-scripting-vulnerability https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2025-3275
Related VulnerabilitiesPoCCVE-2026-32475: Elementor Pro <=4.2.1 - Unauthenticated Arbitrary File Upload via Form HandlerPoCCVE-2026-49777: WordPress Product Slider Pro for WooCommerce < 3.5.4 - Supply Chain Backdoor RCEWordPress Elementor Page Builder 插件 / 文件读取漏洞PoCCVE-2026-1405: WordPress Slider Future <= 1.0.5 - Unauthenticated Arbitrary File UploadPoCCVE-2024-13224: SlideDeck 1 Lite Content Slider - Cross-Site ScriptingPoCCVE-2024-13627: OWL Carousel Slider - Cross-Site ScriptingPoCCVE-2025-14155: Premium Addons for Elementor - Unauthenticated Information DisclosurePoCwp-header-footer-elementor-fpd: WordPress Header Footer Elementor - Full Path DisclosurePoCCVE-2024-29792: Unlimited Elements for Elementor <= 1.5.93 - Cross Site ScriptingPoCwp-elementor-pro-fpd: WordPress Elementor Pro - Full Path DisclosurePoCwordpress-elementor-fpd: WordPress Elementor Page Builder - Full Path DisclosurePoCCVE-2020-13125: Ultimate Addons for Elementor <= 1.24.1 - Registration BypassPoCCVE-2021-4448: Kaswara Modern VC Addons <= 3.0.1 - Missing Authorization