KingAddons.com vulnerabilities

🔔 Create alert RSS

Published CVEs affecting KingAddons.com products: 4 record(s), with severity, exploitation and fixes.

King Addons for Elementor 4

Exploited only (KEV) →

CVE-2025-6327 Critical · 10.0 CWE-434 Nov 6, 2025

WordPress King Addons for Elementor plugin <= 51.1.36 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in KingAddons.com King Addons for Elementor king-addons allows Upload a Web Shell to a Web Server.This issue affects King Addons for Elementor: from n/a through <= 51.1.36.

CVE-2025-6325 Critical · 9.8 CWE-266 Nov 6, 2025

WordPress King Addons for Elementor plugin <= 51.1.36 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in KingAddons.com King Addons for Elementor king-addons allows Privilege Escalation.This issue affects King Addons for Elementor: from n/a through <= 51.1.36.

CVE-2025-62889 Medium · 6.5 CWE-862 Oct 26, 2025

WordPress King Addons for Elementor plugin <= 51.1.61 - Broken Access Control vulnerability

Missing Authorization vulnerability in KingAddons.com King Addons for Elementor king-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects King Addons for Elementor: from n/a through <= 51.1.61.

CVE-2025-62887 Medium · 6.5 CWE-79 Oct 26, 2025

WordPress King Addons for Elementor plugin <= 51.1.61 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KingAddons.com King Addons for Elementor king-addons allows DOM-Based XSS.This issue affects King Addons for Elementor: from n/a through <= 51.1.61.