CVE-2025-58793 describes a stored cross-site scripting vulnerability in the WPBean WPB Elementor Addons plugin for WordPress, affecting versions up to 1.7. The issue is due to improper neutralization of input during web page generation, which allows an attacker to inject and store malicious scripts that execute when other users view the affected pages. The vulnerability has a CVSS 3.1 base score of 6.5, with attack vector network, low attack complexity, requiring privileges and user interaction, and impacts confidentiality, integrity, and availability partially. No patch or vendor advisory is provided, and no known exploits have been observed.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of users viewing the affected web pages, potentially leading to partial disclosure of information, modification of data, or disruption of service. The impact is rated medium based on the CVSS score and affects confidentiality, integrity, and availability to a limited degree. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting user input that can be rendered on web pages or applying web application firewall (WAF) rules to detect and block malicious script payloads. Monitor vendor channels for updates regarding patches or official mitigations.