A vulnerability marked as problematic has been reported in aThemes Addons for Elementor Plugin up to 1.1.5 on WordPress. Affected by this issue is some unknown functionality of the component Action Widget. Performing manipulation results in cross site scripting.
This vulnerability is cataloged as CVE-2025-12837. It is possible to initiate the attack remotely. There is no exploit available.
