Vulnerability in Wpxpro Xpro Elementor Addons - Pro
CVE-2025-0898
The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 1.4.7 via the Draw SVG widget. This makes it possible for authenticated attackers, with Contributor-level ac…
EPSS: 0.000 (10.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Wpxpro Xpro Elementor Addons - Pro — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-0898?
- CVE-2025-0898 is a medium-severity vulnerability in Wpxpro Xpro Elementor Addons - Pro, classified under External Control of File Name or Path. CVSS score: 6.5/10. Published 2026-05-27.
- How severe is CVE-2025-0898?
- Medium severity. CVSS v3 base score is 6.5 out of 10.