King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder

Software Type	Plugin
Software Slug	king-addons (view on wordpress.org)
Software Status	Active
Software Author	kingaddons
Software Downloads	636,373
Software Active Installs	10,000
Software Record Last Updated	October 8, 2026

19 Vulnerabilities

Submit a Vulnerability

King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder <= 51.1.86 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2026-97298

Sep 30, 2026

Researcher: Intrudify

King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder <= 51.1.85 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2026-96835

Sep 24, 2026

Researcher: nh4tvd

King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder <= 51.1.81 - Unauthenticated Insecure Direct Object Reference

5.3

CVE-2026-66575

Sep 17, 2026

Researcher: Sakri Koskimies

King Addons for Elementor 51.1.56 - 51.1.80 - Missing Authorization

4.3

CVE-2026-84904

Sep 16, 2026

Researcher: Artus KG

King Addons for Elementor <= 51.1.80 - Authenticated (Contributor+) Information Exposure

4.3

CVE-2026-84903

Sep 16, 2026

Researcher: Revanth Hari Narayana Matte

King Addons for Elementor <= 51.1.80 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2026-84902

Sep 16, 2026

Researcher: Sai Praneeth Koti

King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder < 51.1.77 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2026-84896

Sep 5, 2026

Researcher: Revanth Hari Narayana Matte

King Addons for Elementor <= 51.1.75 - Reflected XSS via Posts Grid Widget

6.1

CVE-2026-14841

Jul 20, 2026

Researcher: V1T (V1tnamese)

King Addons for Elementor <= 51.1.62 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'form_page_id' Parameter

6.4

CVE-2026-15284

Jun 15, 2026

Researcher: Naoya Takahashi (nakko)

King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder <= 51.1.62 - Authenticated (Subscriber+) Stored Cross-Site Scripting

6.4

CVE-2026-48870

Jun 2, 2026

Researcher: thevietronin

King Addons for Elementor <= 51.1.38 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Widgets

6.4

CVE-2025-13535

Mar 31, 2026

Researcher: Webbernaut

King Addons for Elementor <= 51.1.49 - Unauthenticated API Keys Disclosure

5.3

CVE-2025-13997

Mar 22, 2026

Researcher: Ulyses Saicha

King Addons for Elementor <= 51.1.53 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

6.4

CVE-2025-7960

Dec 12, 2025

Researcher: zer0gh0st

King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege Escalation

9.8

CVE-2025-8489

Oct 30, 2025

Researcher: Peter Thaleikis

King Addons for Elementor <= 51.1.36 - Unauthenticated Arbitrary File Upload

9.8

CVE-2025-6327

Oct 21, 2025

Researcher: Najib Sinjari

King Addons for Elementor <= 51.1.36 - Unauthenticated Privilege Escalation

9.8

CVE-2025-6325

Oct 21, 2025

Researcher: Abu Hurayra (HurayraIIT)

King Addons for Elementor <= 51.1.62 - Missing Authorization

4.3

CVE-2025-62889

Aug 18, 2025

Researcher: Abu Hurayra (HurayraIIT)

King Addons for Elementor <= 51.1.62 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2025-62887

Aug 18, 2025

Researcher: Abu Hurayra (HurayraIIT)

King Addons for Elementor <= 24.12.58 - Missing Authorization

4.3

CVE-2025-30926

Mar 27, 2025

Researcher: João Pedro Soares de Alcântara

Title	Status	CVE ID	CVSS	Researchers	Date
King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder <= 51.1.86 - Authenticated (Contributor+) Stored Cross-Site Scripting	Patched	CVE-2026-97298	6.4	Intrudify	September 30, 2026
King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder <= 51.1.85 - Authenticated (Contributor+) Stored Cross-Site Scripting	Patched	CVE-2026-96835	6.4	nh4tvd	September 24, 2026
King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder <= 51.1.81 - Unauthenticated Insecure Direct Object Reference	Patched	CVE-2026-66575	5.3	Sakri Koskimies	September 17, 2026
King Addons for Elementor 51.1.56 - 51.1.80 - Missing Authorization	Patched	CVE-2026-84904	4.3	Artus KG	September 16, 2026
King Addons for Elementor <= 51.1.80 - Authenticated (Contributor+) Information Exposure	Patched	CVE-2026-84903	4.3	Revanth Hari Narayana Matte	September 16, 2026
King Addons for Elementor <= 51.1.80 - Authenticated (Contributor+) Stored Cross-Site Scripting	Patched	CVE-2026-84902	6.4	Sai Praneeth Koti	September 16, 2026
King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder < 51.1.77 - Authenticated (Contributor+) Stored Cross-Site Scripting	Patched	CVE-2026-84896	6.4	Revanth Hari Narayana Matte	September 5, 2026
King Addons for Elementor <= 51.1.75 - Reflected XSS via Posts Grid Widget	Patched	CVE-2026-14841	6.1	V1T (V1tnamese)	July 20, 2026
King Addons for Elementor <= 51.1.62 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'form_page_id' Parameter	Patched	CVE-2026-15284	6.4	Naoya Takahashi (nakko)	June 15, 2026
King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder <= 51.1.62 - Authenticated (Subscriber+) Stored Cross-Site Scripting	Patched	CVE-2026-48870	6.4	thevietronin	June 2, 2026
King Addons for Elementor <= 51.1.38 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Widgets	Patched	CVE-2025-13535	6.4	Webbernaut	March 31, 2026
King Addons for Elementor <= 51.1.49 - Unauthenticated API Keys Disclosure	Patched	CVE-2025-13997	5.3	Ulyses Saicha	March 22, 2026
King Addons for Elementor <= 51.1.53 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets	Patched	CVE-2025-7960	6.4	zer0gh0st	December 12, 2025
King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege Escalation	Patched	CVE-2025-8489	9.8	Peter Thaleikis	October 30, 2025
King Addons for Elementor <= 51.1.36 - Unauthenticated Arbitrary File Upload	Patched	CVE-2025-6327	9.8	Najib Sinjari	October 21, 2025
King Addons for Elementor <= 51.1.36 - Unauthenticated Privilege Escalation	Patched	CVE-2025-6325	9.8	Abu Hurayra (HurayraIIT)	October 21, 2025
King Addons for Elementor <= 51.1.62 - Missing Authorization	Patched	CVE-2025-62889	4.3	Abu Hurayra (HurayraIIT)	August 18, 2025
King Addons for Elementor <= 51.1.62 - Authenticated (Contributor+) Stored Cross-Site Scripting	Patched	CVE-2025-62887	6.4	Abu Hurayra (HurayraIIT)	August 18, 2025
King Addons for Elementor <= 24.12.58 - Missing Authorization	Patched	CVE-2025-30926	4.3	João Pedro Soares de Alcântara	March 27, 2025

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation