Skip to content
Noroxi

King Addons for Elementor

king-addons · plugin

Known security vulnerabilities for King Addons for Elementor. Find out in seconds which version runs on your site with WP Lens.

14 known vulnerabilities

3 critical · 2 with public exploit code · latest Sep 30, 2026

Vulnerabilities

  • CVE-2025-6327

    WordPress King Addons for Elementor plugin <= 51.1.36 - Arbitrary File Upload vulnerability

    Critical 10.0

  • CVE-2025-6325

    WordPress King Addons for Elementor plugin <= 51.1.36 - Privilege Escalation vulnerability

    Critical 9.8

  • CVE-2025-8489

    King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege Escalation

    Critical 9.8

  • CVE-2026-97298

    WordPress King Addons for Elementor plugin <= 51.1.86 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2026-96835

    WordPress King Addons for Elementor plugin <= 51.1.85 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2026-48870

    WordPress King Addons for Elementor plugin <= 51.1.62 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2025-62889

    WordPress King Addons for Elementor plugin <= 51.1.61 - Broken Access Control vulnerability

    Medium 6.5

  • CVE-2025-62887

    WordPress King Addons for Elementor plugin <= 51.1.61 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2026-15284

    King Addons for Elementor <= 51.1.62 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'form_page_id' Parameter

    Medium 6.4

  • CVE-2025-13535

    King Addons for Elementor <= 51.1.38 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Widgets

    Medium 6.4

  • CVE-2025-7960

    King Addons for Elementor <= 51.1.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    Medium 6.4

  • CVE-2026-66575

    WordPress King Addons for Elementor plugin <= 51.1.81 - Insecure Direct Object References (IDOR) vulnerability

    Medium 5.3

  • CVE-2025-13997

    King Addons for Elementor <= 51.1.49 - Unauthenticated API Keys Disclosure

    Medium 5.3

  • CVE-2025-30926

    WordPress King Addons for Elementor plugin <= 24.12.58 - Broken Access Control Vulnerability

    Medium 4.3

← Back to directory