Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Border Hero widget's Button Link field in versions up to 2.0.1. This is due to insufficient input sanitization and output escaping on user-supplied URLs. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2025-14274 Stored XSS in Unlimited Elements for Elementor Plugin via Border Hero Widget https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-14274
Post summary
The text announces a stored XSS vulnerability (CVE-2025-14274) affecting the Elementor plugin's Border Hero Widget.
CVE-2025-14274 The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Border Hero widget's Button Link field in versions up t… https://www.cve.org/CVERecord?id=CVE-2025-14274
Post summary
The text announces that CVE‑2025‑14274 is a stored XSS vulnerability in the Unlimited Elements for Elementor plugin.