The vulnerability CVE-2025-6327 in King Addons for Elementor permits unauthenticated attackers to upload files with dangerous types without restriction. This allows an attacker to upload a web shell to the server hosting the plugin, potentially enabling full system compromise. The affected versions include all versions up to and including 51.1.36. The CVSS v3.1 base score is 10.0, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and complete impact on confidentiality, integrity, and availability.

Successful exploitation allows an attacker to upload and execute arbitrary code on the web server, leading to full system compromise. This includes unauthorized access to sensitive data, modification or deletion of data, and disruption of service. The vulnerability is critical due to its ease of exploitation and severe impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict file upload permissions and monitor for suspicious uploads if possible. Avoid using affected versions of King Addons for Elementor or disable the plugin until a patch is released.