The vulnerability CVE-2025-32189 affects the BWD Elementor Addons plugin by Best WP Developer. It is a DOM-based cross-site scripting issue caused by improper input neutralization during web page generation. The vulnerability exists in versions up to 4.4.2 and allows an attacker with low privileges and requiring user interaction to potentially execute arbitrary scripts, impacting confidentiality, integrity, and availability to a limited extent. The CVSS 3.1 base score is 6.5, reflecting medium severity with network attack vector, low attack complexity, and partial impact on confidentiality, integrity, and availability. No patch or official remediation information is provided in the available data.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to partial disclosure of information, modification of data, or disruption of service. The attack requires low privileges and user interaction but can affect the confidentiality, integrity, and availability of the affected system to some degree. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider limiting user input that can reach the vulnerable plugin or applying web application firewall (WAF) rules to detect and block potential XSS payloads targeting this component. Monitor vendor channels for updates or patches addressing this vulnerability.