CVE-2025-8488
EUVD-2025-2343102.08.2025, 10:15
The Ultimate Addons for Elementor (Formerly Elementor Header & Footer Builder) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_hfe_compatibility_option_callback ()function in all versions up to, and including, 2.4.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the compatibility option setting.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| brainstormforce | ultimate_addons_for_elementor | 𝑥 ≤ 2.4.6 | CNA |
Common Weakness Enumeration
References