StylePress for Elementor
StylePress for Elementor has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for StylePress for Elementor has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Muhammad Yudha - DJ. StylePress for Elementor is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.9.31.
CVE-2025-58254StylePress for Elementor <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

StylePress for Elementor
Author
dtbaker
This is a free plugin for Elementor Page Builder. It provides two things: A full site builder using Elementor (design your entire website without a Theme) Adds extra widgets to Elementor (e.g. Tooltip, Navbar, Mailchimp, Modal Popups, Page Slider, etc..) Watch this introduction video that covers some of the basics: Design your entire website without a theme. Easily apply a Style to every page of your site automatically using the drag and drop editor. How to create a website design without a WordPress theme: Go to the StylePress > Styles menu. Click “Create New Style”. Design your layout using the Easy Elementor Drag & Drop editor. Add the “Inner Content” widget to the area that will display your content. Go to StylePress > Settings Apply your Style to the “Global” area Tips: Make sure “Remove Theme CSS” is ticked in StylePress > Settings. If you find it hard to set global font default, go into Elementor > Settings and tick “Disable Global Colors” and “Disable Global Fonts”. Then install the “Easy Google Fonts” plugin and set all your defaults from Appearance > Typography. Contributions & Bugs: Head over to github: https://github.com/dtbaker/stylepress Please leave Copyright @dtbaker More details on our dedicated website: https://stylepress.org Check out other work by dtbaker here: https://dtbaker.net
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C