Medium 6.4
2025-11-08< 1.1.6
CVE-2025-12837
Minimum safe version
1.1.6
Update to 1.1.6 or later to address 7 fixable vulnerabilities
CVE-2025-12837
aThemes Addons for Elementor <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
aThemes Addons for Elementor Lite <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
CVE-2025-32158
CVE-2025-22646
CVE-2024-13547
CVE-2024-51675