KingAddons.com vulnerabilities and threats

7 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.2%	CVE-2026-96835King Addons for Elementor (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-09-30CVE Database V5CVE-2026-96835 Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.85 versions. EPSS 0.2%Vulnerability KingAddons.com CWE-79	CVE Database V5	2026-09-30
Medium	5.3	EPSS 0.3%	CVE-2026-66575King Addons for Elementor (WordPress plugin) · Insecure Direct Object Reference Medium5.3EPSS 0.3%2026-09-17CVE Database V5CVE-2026-66575 Unauthenticated Insecure Direct Object References (IDOR) in King Addons for Elementor <= 51.1.81 versions. EPSS 0.3%Vulnerability KingAddons.com CWE-639	CVE Database V5	2026-09-17
Critical	10.0	EPSS 0.4%	CVE-2025-6327King Addons for Elementor (WordPress plugin) · Unrestricted File Upload Critical10.0EPSS 0.4%2025-11-06CVE Database V5CVE-2025-6327 Unrestricted Upload of File with Dangerous Type vulnerability in KingAddons.com King Addons for Elementor king-addons allows Upload a Web Shell to a Web Server.This issue affects King Addons for Elementor: from n/a through <= 51.1.36. EPSS 0.4%Vulnerability KingAddons.com CWE-434	CVE Database V5	2025-11-06
Critical	9.8	EPSS 0.4%	CVE-2025-6325King Addons for Elementor (WordPress plugin) · Incorrect Privilege Assignment Critical9.8EPSS 0.4%2025-11-06CVE Database V5CVE-2025-6325 Incorrect Privilege Assignment vulnerability in KingAddons.com King Addons for Elementor king-addons allows Privilege Escalation.This issue affects King Addons for Elementor: from n/a through <= 51.1.36. EPSS 0.4%Vulnerability KingAddons.com CWE-266	CVE Database V5	2025-11-06
Medium	6.5	EPSS 0.3%	CVE-2025-62889King Addons for Elementor (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2025-10-27CVE Database V5CVE-2025-62889 Missing Authorization vulnerability in KingAddons.com King Addons for Elementor king-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects King Addons for Elementor: from n/a through <= 51.1.61. EPSS 0.3%Vulnerability KingAddons.com	CVE Database V5	2025-10-27
Medium	6.5	EPSS 0.2%	CVE-2025-62887King Addons for Elementor (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-10-27CVE Database V5CVE-2025-62887 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KingAddons.com King Addons for Elementor king-addons allows DOM-Based XSS.This issue affects King Addons for Elementor: from n/a through <= 51.1.61. EPSS 0.2%Vulnerability KingAddons.com	CVE Database V5	2025-10-27
Medium	4.3	EPSS 0.3%	CVE-2025-30926King Addons for Elementor (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.3%2025-04-01CVE Database V5CVE-2025-30926 Missing Authorization vulnerability in KingAddons.com King Addons for Elementor king-addons.This issue affects King Addons for Elementor: from n/a through <= 24.12.58. EPSS 0.3%Vulnerability KingAddons.com	CVE Database V5	2025-04-01

Page 1 of 1