CVE-2025-6327

The CVE-2025-6327 entry concerns the WordPress plugin King Addons for Elementor, versioned up to 51.1.36, which suffers an Unrestricted Upload of File with Dangerous Type vulnerability in king-addons. The flaw allows uploading a web shell to the web server via the plugin (arbitrary file upload vu...

CVE-2025-6327 WordPress King Addons for Elementor plugin <= 51.1.36 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in KingAddons.com King Addons for Elementor king-addons allows Upload a Web Shell to a Web Server.This issue affects King Addons for Elementor: from n/a through = 51.1.36...

CVE-2025-6325 WordPress King Addons for Elementor plugin <= 51.1.36 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in KingAddons.com King Addons for Elementor king-addons allows Privilege Escalation.This issue affects King Addons for Elementor: from n/a through = 51.1.36...

CVE-2025-6325

CVE-2025-6325 affects WordPress King Addons for Elementor up to version 51.1.36. The underlying issue is an incorrect privilege assignment that enables privilege escalation within King Addons for Elementor. Multiple connected sources corroborate the vulnerable component and version range, describ...

CVE-2025-6325 WordPress King Addons for Elementor plugin <= 51.1.36 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in KingAddons.com King Addons for Elementor king-addons allows Privilege Escalation.This issue affects King Addons for Elementor: from n/a through = 51.1.36...

CVE-2025-62065 WordPress RTMKit plugin <= 1.6.5 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Rometheme RTMKit rometheme-for-elementor.This issue affects RTMKit: from n/a through = 1.6.5...

CVE-2025-62065

CVE-2025-62065 : Unrestricted Upload of File with Dangerous Type in WordPress plugin RTMKit (rometheme-for-elementor), affecting RTMKit versions from n/a through 1.6.5. CVSS v3.1 base score 9.9 (CRITICAL) with network attack vector, low attack complexity, and no user interaction. The root cause i...

CVE-2025-62041 WordPress TheGem (Elementor) theme <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem Elementor thegem-elementor.This issue affects TheGem Elementor: from n/a through = 5.10.5.1...

CVE-2025-62041

CVE-2025-62041 is a cross-site scripting (XSS) vulnerability in the WordPress theme plugin combination “TheGem (Elementor)” (thegem-elementor). Connected sources confirm an improper neutralization of input during web page generation affecting TheGem (Elementor) versions from n/a through ≤ 5.10.5....

CVE-2025-62041 WordPress TheGem (Elementor) theme <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem Elementor thegem-elementor.This issue affects TheGem Elementor: from n/a through = 5.10.5.1...

CVE-2025-62012

CVE-2025-62012 affects WordPress TheGem (Elementor) theme and related TheGem elements: thegem-elementor. The vulnerability is caused by improper neutralization of input during web page generation, resulting in a Cross-Site Scripting (XSS) issue. Affected versions are

CVE-2025-62012 WordPress TheGem (Elementor) theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem Elementor thegem-elementor.This issue affects TheGem Elementor: from n/a through = 5.10.5...

CVE-2025-62012 WordPress TheGem (Elementor) theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem Elementor thegem-elementor.This issue affects TheGem Elementor: from n/a through = 5.10.5...

CVE-2025-11820

The Graphina – Elementor Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple chart widgets in all versions up to, and including, 3.1.8 due to insufficient input sanitization and output escaping on data attributes. This makes it possible for authenticat...

CVE-2025-10873

The ElementInvader Addons for Elementor WordPress plugin before 1.4.1 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses due to missing authorization on the elementinvaderaddonsforelementorformssendform action...

PT-2025-45320

Unrestricted Upload of File with Dangerous Type vulnerability in Rometheme RTMKit rometheme-for-elementor.This issue affects RTMKit: from n/a through = 1.6.5...

PT-2025-45328

Name of the Vulnerable Software and Affected Versions King Addons for Elementor versions through 51.1.36 Description An incorrect privilege assignment exists in King Addons for Elementor, allowing for privilege escalation. The issue allows an attacker to gain elevated privileges within the system...

WordPress plugin King Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

WordPress plugin King Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

PT-2025-45329

Name of the Vulnerable Software and Affected Versions King Addons for Elementor versions through 51.1.36 Description The software contains a flaw that permits the upload of files with dangerous types, potentially allowing the upload of a web shell to a web server. Recommendations Update King Addo...