Lucene search
+L

9453 matches found

NVD
NVD
•added 2025/10/31 12:15 p.m.•20 views

CVE-2025-64352

Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Addons for Elementor: from n/a through = 6.2.4...

2.7CVSS0.00228EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/31 11:42 a.m.•47 views

CVE-2025-64352

The CVE-2025-64352 entry concerns WordPress WPDeveloper Essential Addons for Elementor (essential-addons-for-elementor-lite) up to version 6.2.4 with a Missing Authorization / Broken Access Control vulnerability due to misconfigured access controls. Exploitation could compromise integrity (I: LOW...

2.7CVSS6AI score0.00228EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/10/31 11:42 a.m.•29 views

CVE-2025-64352 WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Addons for Elementor: from n/a through = 6.2.4...

2.7CVSS0.00228EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/31 11:42 a.m.•4 views

CVE-2025-64352 WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Addons for Elementor: from n/a through = 6.2.4...

2.7CVSS6AI score0.00228EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/31 9:30 a.m.•27 views

EUVD-2025-37306

The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor plugin for WordPress is vulnerable to privilege escalation in versions 24.12.92 to 51.1.14 . This is due to the plugin not properly restricting the roles that users can register with. This makes it...

9.8CVSS6.1AI score0.09606EPSS
SaveExploits4References4
NVD
NVD
•added 2025/10/31 7:15 a.m.•26 views

CVE-2025-8489

The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor plugin for WordPress is vulnerable to privilege escalation in versions 24.12.92 to 51.1.14 . This is due to the plugin not properly restricting the roles that users can register with. This makes it...

9.8CVSS0.09606EPSS
SaveExploits4References3
CVE
CVE
•added 2025/10/31 6:42 a.m.•137 views

CVE-2025-8489

The CVE-2025-8489 vulnerability affects WordPress plugin King Addons for Elementor (versions 24.12.92–51.1.14). It arises from insufficient restriction of registration roles, allowing unauthenticated users to register as administrator accounts (privilege escalation). Exploitation details in conne...

9.8CVSS6AI score0.09606EPSS
SaveIn wildExploits4References3
Vulnrichment
Vulnrichment
•added 2025/10/31 6:42 a.m.•8 views

CVE-2025-8489 King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege Escalation

The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor plugin for WordPress is vulnerable to privilege escalation in versions 24.12.92 to 51.1.14 . This is due to the plugin not properly restricting the roles that users can register with. This makes it...

9.8CVSS6AI score0.09606EPSS
SaveExploits4References3
Cvelist
Cvelist
•added 2025/10/31 6:42 a.m.•38 views

CVE-2025-8489 King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege Escalation

The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor plugin for WordPress is vulnerable to privilege escalation in versions 24.12.92 to 51.1.14 . This is due to the plugin not properly restricting the roles that users can register with. This makes it...

9.8CVSS0.09606EPSS
SaveExploits4References3
CNNVD
CNNVD
•added 2025/10/31 12:00 a.m.•23 views

WordPress plugin King Addons for Elementor 安全漏洞

WordPress King Addons for Elementor plugin is an extension plugin designed specifically for the Elementor page builder, offering a large number of preset templates, components, and features for quickly building WordPress websites. The WordPress King Addons for Elementor plugin suffers from an...

9.8CVSS7AI score0.09606EPSS
SaveExploits4References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/31 12:00 a.m.•3 views

CVE-2025-8489: Improper Privilege Management

The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor plugin for WordPress is vulnerable to privilege escalation in versions 24.12.92 to 51.1.14 . This is due to the plugin not properly restricting the roles that users can register with. This makes it...

9.8CVSS6AI score0.09606EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2025/10/31 12:00 a.m.•21 views

PT-2025-44584

Name of the Vulnerable Software and Affected Versions King Addons for Elementor versions 24.12.92 through 51.1.14 ShopLentor WordPress Plugin affected versions not specified Description King Addons for Elementor, a WordPress plugin, has a critical privilege escalation issue CVE-2025-8489 that...

9.8CVSS6.4AI score0.09606EPSS
SaveExploits4References45
Positive Technologies
Positive Technologies
•added 2025/10/31 12:00 a.m.•30 views

PT-2025-44604

Name of the Vulnerable Software and Affected Versions WPDeveloper Essential Addons for Elementor versions through 6.2.4 Description A missing authorization issue exists in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite. This allows exploitation of incorrectly...

2.7CVSS6.5AI score0.00228EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/10/31 12:00 a.m.•18 views

WordPress plugin Essential Addons for Elementor 安全漏洞

WordPress Essential Addons for Elementor plugin is an extension plugin designed for Elementor page builder, offering over 80 advanced widgets and modules for creating professional web designs. The WordPress Essential Addons for Elementor plugin suffers from an Authorization Missing vulnerability...

2.7CVSS6.7AI score0.00228EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/31 12:00 a.m.•6 views

CVE-2025-64352: Missing Authorization

Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Addons for Elementor: from n/a through = 6.2.4...

2.7CVSS6AI score0.00228EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2025/10/31 12:00 a.m.•8 views

VulnCheck KEV: CVE-2025-8489

The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor plugin for WordPress is vulnerable to privilege escalation in versions 24.12.92 to 51.1.14 . This is due to the plugin not properly restricting the roles that users can register with. This makes it...

9.8CVSS6AI score0.09606EPSS
SaveIn wildExploits4References4
Metasploit
Metasploit
•added 2025/10/30 12:00 a.m.•567 views

WordPress King Addons for Elementor Unauthenticated Privilege Escalation to RCE

This module exploits an unauthenticated privilege escalation vulnerability in the WordPress King Addons for Elementor plugin versions 24.12.92 to 51.1.14. The vulnerability exists in the handleregisterajax function which allows unauthenticated attackers to specify the userrole parameter during...

9.8CVSS6.5AI score0.09606EPSS
SaveExploits4
RedhatCVE
RedhatCVE
•added 2025/10/28 2:38 a.m.•28 views

CVE-2025-62923

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Debuggers Studio Marquee Addons for Elementor marquee-addons-for-elementor allows DOM-Based XSS.This issue affects Marquee Addons for Elementor: from n/a through = 3.8.2...

6.5CVSS5.9AI score0.00204EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/28 2:38 a.m.•14 views

CVE-2025-48088

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BrainstormForce Ultimate Addons for WPBakery Page Builder ultimatevcaddons allows Stored XSS.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a through 3.21.1...

6.5CVSS5.9AI score0.00165EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/28 1:34 a.m.•12 views

CVE-2025-62889

Missing Authorization vulnerability in KingAddons.com King Addons for Elementor king-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects King Addons for Elementor: from n/a through = 51.1.61...

6.5CVSS5.9AI score0.00316EPSS
SaveExploits0References1
Rows per page
Query Builder