WordPress security by component
King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder
Plugin description
King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder is a WordPress component with 11 published CVE records in this archive. The latest tracked vulnerability was published Jul 10, 2026; the highest CVE/CNA score is 10.
Plugin slug:
king-addonsLatest vulnerability
CVE-2026-15284: King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder: Cross-site scripting
King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder is affected by cross-site scripting. Exploitation requires at least subscriber-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 51.1.62.
| Safe version |
|
||
|---|---|---|---|
| Jul 10, 2026 |
CVE-2026-15284
King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder: Cross-site scripting
King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder is affected by cross-site scripting. Exploitation requires at least subscriber-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 51.1.62.
|
> 51.1.62 |
CVE6.4
NVDPending
|
| Jun 15, 2026 |
CVE-2026-48870
King Addons for Elementor: Cross-site scripting
King Addons for Elementor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 51.1.62.
|
51.1.63 |
CVE6.5
NVDPending
|
| Apr 01, 2026 |
CVE-2025-13535
King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder: Cross-site scripting
King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 51.1.53.
|
> 51.1.53 |
CVE6.4
NVDPending
|
| Mar 23, 2026 |
CVE-2025-13997
King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder: A security weakness
King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 51.1.49.
|
> 51.1.49 |
CVE5.3
NVDPending
|
| Dec 13, 2025 |
CVE-2025-7960
King Addons for Elementor: Cross-site scripting
King Addons for Elementor is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVDPending
|
| Nov 06, 2025 |
CVE-2025-6327
King Addons for Elementor: Dangerous file upload
King Addons for Elementor is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
|
See mitigation notes |
CVE10.0
NVDPending
|
| Nov 06, 2025 |
CVE-2025-6325
King Addons for Elementor: Privilege escalation or authentication bypass
King Addons for Elementor is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE9.8
NVDPending
|
| Oct 31, 2025 |
CVE-2025-8489
King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor: Privilege escalation or authentication bypass
King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE9.8
NVDPending
|
| Oct 27, 2025 |
CVE-2025-62889
King Addons for Elementor: A security weakness
King Addons for Elementor is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Oct 27, 2025 |
CVE-2025-62887
King Addons for Elementor: Cross-site scripting
King Addons for Elementor is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Apr 01, 2025 |
CVE-2025-30926
King Addons for Elementor: A security weakness
King Addons for Elementor is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|