CVE-2025-24752 PoC — WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability

Source

https://github.com/bartfroklage/CVE-2025-24752-POC

Associated Vulnerability

Title:WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability (CVE-2025-24752)
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Reflected XSS.This issue affects Essential Addons for Elementor: from n/a through <= 6.0.14.

Description

POC for CVE-2025-24752.

Readme

# CVE-2025-24752-POC

## Introduction

This python application checks whether a site is vulnerable to CVE-2025-24752.


## Install

Clone this repo and run:
```
pip3 install -r requirements.txt

```


## Usage

```
python3 cve-2025-24752.py --url http://example.com

```

or 

```
python3 cve-2025-24752.py --urls-file urls.txt

```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!