CVE-2025-6325_CVE-2025-6327

CVE-2025-6325 + CVE-2025-6327 King Addons for Elementor — デュアルエクスプロイトPoC King Addons for Elementor 認可されたセキュリティテスト、脆弱性研究、および管理されたラボ環境での使用のみを目的としています。 概要 本プロジェクトは、King Addons for Elementor における2つの脆弱性のセキュリティ影響を検証するためのデュアル目的PoCを提供します。 CVE-2025-6325 King Addonsの登録機能を通じた認証不要の権限昇格。 脆弱なフローはクライアント制御の...

CVE-2026-97298

Contributor Cross Site Scripting XSS in King Addons for Elementor = 51.1.86 versions...

CVE-2026-96835

Contributor Cross Site Scripting XSS in King Addons for Elementor = 51.1.85 versions...

CVE-2026-97298 WordPress King Addons for Elementor plugin <= 51.1.86 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in King Addons for Elementor = 51.1.86 versions...

CVE-2026-97298

The King Addons for Elementor WordPress plugin (versions

EUVD-2026-89933

Contributor Cross Site Scripting XSS in King Addons for Elementor = 51.1.86 versions...

CVE-2026-97298 WordPress King Addons for Elementor plugin <= 51.1.86 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in King Addons for Elementor = 51.1.86 versions...

CVE-2026-96835 WordPress King Addons for Elementor plugin <= 51.1.85 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in King Addons for Elementor = 51.1.85 versions...

EUVD-2026-89887

Contributor Cross Site Scripting XSS in King Addons for Elementor = 51.1.85 versions...

CVE-2026-96835 WordPress King Addons for Elementor plugin <= 51.1.85 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in King Addons for Elementor = 51.1.85 versions...

CVE-2026-96835

The King Addons for Elementor WordPress plugin versions

WordPress King Addons for Elementor plugin <= 51.1.86 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin King Addons for Elementor versions = 51.1.86...

CVE-2026-97298: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in King Addons for Elementor = 51.1.86 versions...

CVE-2026-96835: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in King Addons for Elementor = 51.1.85 versions...

WordPress King Addons for Elementor plugin <= 51.1.85 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin King Addons for Elementor versions = 51.1.85...

Exploit for CVE-2025-6325

CVE-2025-6325-CVE-2025-6327 CVE-20...

Exploit for CVE-2025-6325

CVE-2025-6325 + CVE-2025-6327 King Addons for Elementor —...

CVE-2026-84904

The King Addons for Elementor WordPress plugin before 51.1.81 does not perform per-object authorization checks on a group of image-optimization actions, gating them only on a coarse capability that lower-privileged users also hold and never confirming ownership of the targeted object, allowing...

CVE-2026-84902

The King Addons for Elementor WordPress plugin before 51.1.81 does not perform an object-level authorization check when importing template content into a page, allowing users with contributor-level access and above to overwrite the Elementor content of arbitrary posts and pages, including those...

CVE-2026-84903

The King Addons for Elementor WordPress plugin before 51.1.81 does not perform any capability, post-status, or password check before rendering the content of a user-supplied post, allowing users with Contributor-level access and above to read the content of private, draft, pending, and...