Spider Elements Vulnerabilities

The Spider Elements – Crafted UX First Addons for Elementor plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.6.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an una...

CVSS:

4.3

Affected:

up to 1.6.3

Fixed in:

1.6.7

Disclosed:

Apr 7, 2025

CVE-2025-32216 on NVD →

The Spider Elements – Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.6.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrar...

CVSS:

6.4

Affected:

up to 1.6.5

Fixed in:

1.6.6

Disclosed:

Apr 4, 2025

CVE-2025-32182 on NVD →