Medium severity5.3NVD Advisory· Published Nov 5, 2025· Updated Apr 15, 2026

CVE-2025-10873

Description

The ElementInvader Addons for Elementor WordPress plugin before 1.4.1 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses due to missing authorization on the elementinvader_addons_for_elementor_forms_send_form action.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Elementinvader/Elementinvader Addons For Elementorllm-fuzzy
Range: <1.4.1
WordPress/Elementinvader Addons For Elementorwp-canonicalize
Package: https://wordpress.org/plugins/elementinvader-addons-for-elementor

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/2eb133db-e1c5-409e-94f8-b71edca5db16/nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000