CVE-2025-69300

WordPress Premium Addons for Elementor plugin <= 4.11.63 - Settings Change vulnerability

Missing Authorization vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premium Addons for Elementor: from n/a through <= 4.11.63.

We have discovered 98,144 live websites that are affected by CVE-2025-69300.

Run a Free Instant Scan



Affected Software

Product  Premium Addons for Elementor
Category Wordpress Plugins
Vulnerable Domains98,144 live websites (100% of Premium Addons for Elementor install base)
Vulnerable Versions
  • from 0 through 4.11.63
Vulnerable Versions Count411 versions ( 100% of all versions)



Details

  • Published - Jan 22, 2026
  • Updated - Jan 27, 2026

Credits

  • Phat RiO | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2025-69300
United States28,210 websites


Germany10,326 websites
France6,351 websites
Brazil4,595 websites
GB4,282 websites
India3,450 websites
Italy3,352 websites
Spain2,940 websites
Cyprus2,636 websites
Poland2,245 websites

Website Distribution by TLD

Number of websites using CVE-2025-69300
.com41,991 websites
.de6,111 websites
.org4,502 websites
.com.br4,219 websites
.fr3,267 websites
.co.uk2,489 websites
.it2,429 websites
.nl1,976 websites
.pl1,681 websites
.net1,673 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2025-69300

Top websites that are affected by CVE-2025-69300. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
***********.com United States*,***
*********.com Israel*,***
*********.com United States*,***
******************.org United States*,***
********.ca Canada**,***
******.com United States**,***
*******************.nl Netherlands**,***
********.com United States**,***
******.com United States**,***
****************.com United States**,***
See full domain list

FAQ

A total of 98,144 websites have been identified as vulnerable to CVE-2025-69300, based on global website indexing conducted by WebTechSurvey.
The Premium Addons for Elementor is affected by the CVE-2025-69300 vulnerability.
Premium Addons for Elementor versions up to and including 4.11.63 are vulnerable to CVE-2025-69300.