CVE-2025-14155 — Vulnerability intelligence

leap13 — premium addons for elementor

Published: 2025-12-23T09:19:59.928Z

CVSS

5.3

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_template_content' function in all versions up to, and including, 4.11.53. This makes it possible for unauthenticated attackers to view the content of private, draft, and pending templates.

Sources

• CVE-2025-14155
• Product
• Product
• Patch
• Original advisory
• Third Party Advisory
• CVE-2025-14155