{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-8462", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-08-01T15:00:32.234Z", "datePublished": "2025-08-12T02:24:45.938Z", "dateUpdated": "2026-04-08T16:34:54.639Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:34:54.639Z"}, "affected": [{"vendor": "risetheme", "product": "RT Easy Builder \u2013 Advanced addons for Elementor", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.3", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The RT Easy Builder \u2013 Advanced addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the social URL parameter in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."}], "title": "RT Easy Builder <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0bb02fd7-1090-4139-ae0e-977fdec5da7f?source=cve"}, {"url": "https://wordpress.org/plugins/rt-easy-builder-advanced-addons-for-elementor/"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "cweId": "CWE-79", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "baseScore": 6.4, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "D.Sim"}], "timeline": [{"time": "2025-08-11T13:48:34.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-08-12T13:30:34.656813Z", "id": "CVE-2025-8462", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-08-13T20:19:25.568Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-8462", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-08-12T13:30:34.656813Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-08-12T13:30:35.807Z"}}], "cna": {"title": "RT Easy Builder <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting", "credits": [{"lang": "en", "type": "finder", "value": "D.Sim"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 6.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"}}], "affected": [{"vendor": "risetheme", "product": "RT Easy Builder \u2013 Advanced addons for Elementor", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "2.3"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-08-11T13:48:34.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0bb02fd7-1090-4139-ae0e-977fdec5da7f?source=cve"}, {"url": "https://wordpress.org/plugins/rt-easy-builder-advanced-addons-for-elementor/"}], "descriptions": [{"lang": "en", "value": "The RT Easy Builder \u2013 Advanced addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the social URL parameter in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:34:54.639Z"}}}, "cveMetadata": {"cveId": "CVE-2025-8462", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:34:54.639Z", "dateReserved": "2025-08-01T15:00:32.234Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-08-12T02:24:45.938Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "The RT Easy Builder \u2013 Advanced addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the social URL parameter in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."}, {"lang": "es", "value": "El complemento RT Easy Builder \u2013 Advanced addons for Elementor para WordPress es vulnerable a Cross-Site Scripting almacenado a trav\u00e9s del par\u00e1metro URL social en todas las versiones hasta la 2.3 incluida, debido a una depuraci\u00f3n de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de colaborador o superior, inyectar scripts web arbitrarios en las p\u00e1ginas que se ejecutar\u00e1n al acceder un usuario a una p\u00e1gina inyectada."}], "id": "CVE-2025-8462", "lastModified": "2026-04-15T00:35:42.020", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 2.7, "source": "security@wordfence.com", "type": "Secondary"}]}, "published": "2025-08-12T03:15:29.123", "references": [{"source": "security@wordfence.com", "url": "https://wordpress.org/plugins/rt-easy-builder-advanced-addons-for-elementor/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0bb02fd7-1090-4139-ae0e-977fdec5da7f?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T17:01:20.441128+00:00", "value": {"mitigation_remediation": ["Update the RT Easy Builder \u2013 Advanced addons for Elementor plugin to version 2.4 or later, which contains the proper sanitization and escaping changes.", "For environments that cannot patch immediately, edit or remove any existing social URL entries that may contain malicious content to prevent script execution.", "Restrict Contributor+ level access to trusted users only and consider disabling or limiting the social URL feature until the patch is applied."], "summary": {"action": "Apply Patch", "impact": "Stored Cross\u2011Site Scripting"}, "threat_synthesis": {"affected_systems": "WordPress sites running the RT Easy Builder \u2013 Advanced addons for Elementor plugin version 2.3 or earlier, provided by Risetheme. The vulnerability applies to all product releases up to and including 2.3.", "description_and_impact": "The RT Easy Builder \u2013 Advanced addons for Elementor plugin for WordPress is vulnerable to a stored Cross\u2011Site Scripting flaw in the social URL parameter because the input is not properly sanitized and the output is not correctly escaped. Authenticated users with Contributor or higher privileges can inject arbitrary JavaScript, which will execute whenever a user accesses the affected page.", "risk_and_exploitability": "The CVSS score of 6.4 indicates a moderate risk. The EPSS score of < 1% suggests that the likelihood of exploitation is low but non\u2011zero. The vulnerability is not listed in the CISA KEV catalog, so no known widespread exploitation is reported. Attackers must be authenticated with at least Contributor level access, which limits the potential threat vector to internal privileged users. The impact is limited to users who view the injected page."}}}}, "created": "2025-08-12T07:36:53.536414+00:00", "updated": "2026-04-22T17:15:22.189718+00:00", "vendors": ["risethemes", "risethemes$PRODUCT$rt_easy_builder", "wordpress", "wordpress$PRODUCT$wordpress"]}