A notable security flaw has been identified in the “Premium Addons for Elementor \u2013 Powerful Elementor Templates & Widgets” plugin for WordPress. This vulnerability, tracked as CVE-2025-14155, could allow unauthorized individuals to access sensitive content on your website. For any website owner using this popular Elementor addon, understanding this risk and applying the necessary fix is crucial.<\/p>\n
At its core, this vulnerability stems from a missing security check within a specific function of the plugin. This oversight means that even visitors who are not logged in or do not have proper permissions could potentially view content from private, draft, or pending templates on your WordPress site. This could expose information that was never intended for public eyes, posing a significant privacy and security risk.<\/p>\n
Product:<\/strong> Premium Addons for Elementor \u2013 Powerful Elementor Templates & Widgets plugin for WordPress<\/p>\n CVE ID:<\/strong> CVE-2025-14155<\/p>\n Published:<\/strong> December 23, 2025<\/p>\n Severity:<\/strong> Medium<\/p>\n Status:<\/strong> Analyzed<\/p>\n The vulnerability impacts all versions of the “Premium Addons for Elementor” plugin for WordPress up to, and including, version 4.11.53. If you are running any version within this range, your website may be at risk.<\/p>\n The vulnerability has been thoroughly analyzed, meaning its nature and potential impact are well understood. A fix has been released by the plugin developers.<\/p>\n CVE-2025-14155 is rated as Medium severity. This indicates that while the vulnerability could lead to information disclosure, it might require specific conditions or user interaction (though in this case, unauthenticated access is possible) and does not typically allow for full system compromise or remote code execution. However, exposing draft or private content still carries significant risks for website integrity and reputation, making prompt action highly advisable.<\/p>\n The good news is that a patch is available to address this vulnerability. Users of the Premium Addons for Elementor plugin should update to version 4.11.54 or higher immediately. This update introduces the necessary capability checks to the 'get_template_content' function, preventing unauthorized access to your private, draft, and pending templates.<\/p>\n Always ensure your WordPress core, themes, and all plugins are kept up-to-date to protect your site from known vulnerabilities.<\/p>\n https:\/\/plugins.trac.wordpress.org\/browser\/premium-addons-for-elementor\/tags\/4.11.53\/includes\/addons-integration.php#L1624<\/p>\n https:\/\/plugins.trac.wordpress.org\/browser\/premium-addons-for-elementor\/tags\/4.11.53\/includes\/addons-integration.php#L90<\/p>\n https:\/\/plugins.trac.wordpress.org\/changeset\/3416254\/<\/p>\n https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/id\/135c33bb-5ec2-4697-9340-1d2651ff3a0b?source=cve<\/p>\n","protected":false},"excerpt":{"rendered":" Understanding the Unauthorized Access Vulnerability in Premium Addons for Elementor A notable security flaw has been identified in the “Premium Addons for Elementor \u2013 Powerful Elementor Templates & Widgets” plugin for WordPress. This vulnerability, tracked as CVE-2025-14155, could allow unauthorized individuals to access sensitive content on your website. For any website owner using this popular […]<\/p>\n","protected":false},"author":17,"featured_media":2545,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[915,697,715,914,719],"class_list":["post-3075","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-elementor-addons","tag-information-disclosure","tag-plugin-vulnerability","tag-premium-addons-for-elementor","tag-wordpress-security"],"blocksy_meta":[],"yoast_head":"\nAffected Products<\/h2>\n
Current Status<\/h2>\n
Severity Level<\/h2>\n
Possible Solutions<\/h2>\n
References<\/h2>\n