CVE-2025-10873 — Elementinvader Addons for Elementor < 1.4.1 – Unauthenticated Arbitrary Email Sending
The ElementInvader Addons for Elementor WordPress plugin before 1.4.1 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses due to missing authorization o…
Published: 2025-11-05 · CVSS: 5.3 · CVSS 3.1
The ElementInvader Addons for Elementor WordPress plugin before 1.4.1 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses due to missing authorization on the elementinvader_addons_for_elementor_forms_send_form action.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7