Lucene search
+L

109 matches found

Cvelist
Cvelist
added 2025/11/06 3:56 p.m.22 views

CVE-2025-6327 WordPress King Addons for Elementor plugin <= 51.1.36 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in KingAddons.com King Addons for Elementor king-addons allows Upload a Web Shell to a Web Server.This issue affects King Addons for Elementor: from n/a through = 51.1.36...

10CVSS0.00466EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/11/06 3:56 p.m.5 views

CVE-2025-6325 WordPress King Addons for Elementor plugin <= 51.1.36 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in KingAddons.com King Addons for Elementor king-addons allows Privilege Escalation.This issue affects King Addons for Elementor: from n/a through = 51.1.36...

9.8CVSS9AI score0.00399EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/06 3:56 p.m.71 views

CVE-2025-6325

CVE-2025-6325 affects WordPress King Addons for Elementor up to version 51.1.36. The underlying issue is an incorrect privilege assignment that enables privilege escalation within King Addons for Elementor. Multiple connected sources corroborate the vulnerable component and version range, describ...

9.8CVSS9AI score0.00399EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/06 3:56 p.m.18 views

CVE-2025-6325 WordPress King Addons for Elementor plugin <= 51.1.36 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in KingAddons.com King Addons for Elementor king-addons allows Privilege Escalation.This issue affects King Addons for Elementor: from n/a through = 51.1.36...

9.8CVSS0.00399EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.11 views

PT-2025-45328

Name of the Vulnerable Software and Affected Versions King Addons for Elementor versions through 51.1.36 Description An incorrect privilege assignment exists in King Addons for Elementor, allowing for privilege escalation. The issue allows an attacker to gain elevated privileges within the system...

9.8CVSS6.9AI score0.00399EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.11 views

WordPress plugin King Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

10CVSS8.9AI score0.00466EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.11 views

WordPress plugin King Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

9.8CVSS8.8AI score0.00399EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.15 views

PT-2025-45329

Name of the Vulnerable Software and Affected Versions King Addons for Elementor versions through 51.1.36 Description The software contains a flaw that permits the upload of files with dangerous types, potentially allowing the upload of a web shell to a web server. Recommendations Update King Addo...

10CVSS6.8AI score0.00466EPSS
SaveExploits0References3
CNVD
CNVD
added 2025/11/05 12:00 a.m.14 views

WordPress King Addons for Elementor plugin elevation of privilege vulnerability

WordPress King Addons for Elementor plugin is an extension plugin designed specifically for the Elementor page builder, offering a large number of preset templates, components, and features for quickly building WordPress websites. The WordPress King Addons for Elementor plugin suffers from an...

9.8CVSS7.2AI score0.0927EPSS
SaveExploits4References1
RedhatCVE
RedhatCVE
added 2025/11/01 6:58 a.m.15 views

CVE-2025-8489

The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor plugin for WordPress is vulnerable to privilege escalation in versions 24.12.92 to 51.1.14 . This is due to the plugin not properly restricting the roles that users can register with. This makes it...

9.8CVSS6.6AI score0.0927EPSS
SaveExploits4References1
EUVD
EUVD
added 2025/10/31 9:30 a.m.19 views

EUVD-2025-37306

The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor plugin for WordPress is vulnerable to privilege escalation in versions 24.12.92 to 51.1.14 . This is due to the plugin not properly restricting the roles that users can register with. This makes it...

9.8CVSS6.1AI score0.0927EPSS
SaveExploits4References4
NVD
NVD
added 2025/10/31 7:15 a.m.20 views

CVE-2025-8489

The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor plugin for WordPress is vulnerable to privilege escalation in versions 24.12.92 to 51.1.14 . This is due to the plugin not properly restricting the roles that users can register with. This makes it...

9.8CVSS0.0927EPSS
SaveExploits4References3
Vulnrichment
Vulnrichment
added 2025/10/31 6:42 a.m.6 views

CVE-2025-8489 King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege Escalation

The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor plugin for WordPress is vulnerable to privilege escalation in versions 24.12.92 to 51.1.14 . This is due to the plugin not properly restricting the roles that users can register with. This makes it...

9.8CVSS5.9AI score0.0927EPSS
SaveExploits4References3
Cvelist
Cvelist
added 2025/10/31 6:42 a.m.25 views

CVE-2025-8489 King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege Escalation

The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor plugin for WordPress is vulnerable to privilege escalation in versions 24.12.92 to 51.1.14 . This is due to the plugin not properly restricting the roles that users can register with. This makes it...

9.8CVSS0.0927EPSS
SaveExploits4References3
CVE
CVE
added 2025/10/31 6:42 a.m.124 views

CVE-2025-8489

The CVE-2025-8489 vulnerability affects WordPress plugin King Addons for Elementor (versions 24.12.92–51.1.14). It arises from insufficient restriction of registration roles, allowing unauthenticated users to register as administrator accounts (privilege escalation). Exploitation details in conne...

9.8CVSS6.2AI score0.0927EPSS
SaveIn wildExploits4References3
Positive Technologies
Positive Technologies
added 2025/10/31 12:00 a.m.14 views

PT-2025-44584

Name of the Vulnerable Software and Affected Versions King Addons for Elementor versions 24.12.92 through 51.1.14 ShopLentor WordPress Plugin affected versions not specified Description King Addons for Elementor, a WordPress plugin, has a critical privilege escalation issue CVE-2025-8489 that...

9.8CVSS6.4AI score0.0927EPSS
SaveExploits4References45
CNNVD
CNNVD
added 2025/10/31 12:00 a.m.13 views

WordPress plugin King Addons for Elementor 安全漏洞

WordPress King Addons for Elementor plugin is an extension plugin designed specifically for the Elementor page builder, offering a large number of preset templates, components, and features for quickly building WordPress websites. The WordPress King Addons for Elementor plugin suffers from an...

9.8CVSS7AI score0.0927EPSS
SaveExploits4References4
VulnCheck KEV
VulnCheck KEV
added 2025/10/31 12:00 a.m.5 views

VulnCheck KEV: CVE-2025-8489

The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor plugin for WordPress is vulnerable to privilege escalation in versions 24.12.92 to 51.1.14 . This is due to the plugin not properly restricting the roles that users can register with. This makes it...

9.8CVSS5.8AI score0.0927EPSS
SaveIn wildExploits4References4
Metasploit
Metasploit
added 2025/10/30 12:00 a.m.559 views

WordPress King Addons for Elementor Unauthenticated Privilege Escalation to RCE

This module exploits an unauthenticated privilege escalation vulnerability in the WordPress King Addons for Elementor plugin versions 24.12.92 to 51.1.14. The vulnerability exists in the handleregisterajax function which allows unauthenticated attackers to specify the userrole parameter during...

9.8CVSS6.5AI score0.0927EPSS
SaveExploits4
RedhatCVE
RedhatCVE
added 2025/10/28 1:34 a.m.8 views

CVE-2025-62889

Missing Authorization vulnerability in KingAddons.com King Addons for Elementor king-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects King Addons for Elementor: from n/a through = 51.1.61...

6.5CVSS5.9AI score0.00294EPSS
SaveExploits0References1
Rows per page
Query Builder