Advisories · Technology

KingAddons.com King Addons for Elementor.

Every CVE that names KingAddons.com King Addons for Elementor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-96835 CVE record

CVSS 6.5 Medium

WordPress King Addons for Elementor plugin <= 51.1.85 - Cross Site Scripting (XSS) vulnerability
- KingAddons.com King Addons for Elementor
- Cross-site scripting (XSS)
Not analysed yet 30 Sept 2026
CVE-2026-66575 CVE record

CVSS 5.3 Medium

WordPress King Addons for Elementor plugin <= 51.1.81 - Insecure Direct Object References (IDOR) vulnerability
- KingAddons.com King Addons for Elementor
- Broken access control
Not analysed yet 17 Sept 2026
CVE-2025-6327 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

WordPress King Addons for Elementor plugin <= 51.1.36 - Arbitrary File Upload vulnerability
- KingAddons.com King Addons for Elementor
- Unrestricted file upload
Not analysed yet 6 Nov 2025
CVE-2025-6325 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress King Addons for Elementor plugin <= 51.1.36 - Privilege Escalation vulnerability
- KingAddons.com King Addons for Elementor
- Privilege escalation
Not analysed yet 6 Nov 2025
CVE-2025-62889 CVE record

CVSS 6.5 Medium

WordPress King Addons for Elementor plugin <= 51.1.61 - Broken Access Control vulnerability
- KingAddons.com King Addons for Elementor
- Broken access control
Not analysed yet 27 Oct 2025
CVE-2025-62887 CVE record

CVSS 6.5 Medium

WordPress King Addons for Elementor plugin <= 51.1.61 - Cross Site Scripting (XSS) vulnerability
- KingAddons.com King Addons for Elementor
- Cross-site scripting (XSS)
Not analysed yet 27 Oct 2025
CVE-2025-30926 CVE record

CVSS 4.3 Medium

WordPress King Addons for Elementor plugin <= 24.12.58 - Broken Access Control Vulnerability
- KingAddons.com King Addons for Elementor
- Broken access control
Not analysed yet 1 Apr 2025