The ElementInvader Addons for Elementor WordPress plugin before 1.4.1 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses due to missing authorization on the elementinvader_addons_for_elementor_forms_send_form action.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 05 Nov 2025 06:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The ElementInvader Addons for Elementor WordPress plugin before 1.4.1 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses due to missing authorization on the elementinvader_addons_for_elementor_forms_send_form action. | |
| Title | Elementinvader Addons for Elementor < 1.4.1 – Unauthenticated Arbitrary Email Sending | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: WPScan
Published:
Updated: 2025-11-05T06:00:06.600Z
Reserved: 2025-09-23T12:21:49.391Z
Link: CVE-2025-10873
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-11-05T06:15:32.870
Modified: 2025-11-05T06:15:32.870
Link: CVE-2025-10873
Redhat
No data.
OpenCVE Enrichment
No data.