King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder

Information

Software Type Plugin
Software Slug king-addons (view on wordpress.org)
Software Status Active
Software Author kingaddons
Software Downloads 575,262
Software Active Installs 10,000
Software Record Last Updated July 21, 2026

11 Vulnerabilities

Submit a Vulnerability
King Addons for Elementor <= 51.1.62 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'form_page_id' Parameter
6.4
CVE-2026-15284
Jun 15, 2026
Researcher: Naoya Takahashi (nakko)
King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder <= 51.1.62 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2026-48870
Jun 2, 2026
Researcher: thevietronin
King Addons for Elementor <= 51.1.38 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Widgets
6.4
CVE-2025-13535
Mar 31, 2026
Researcher: Webbernaut
King Addons for Elementor <= 51.1.49 - Unauthenticated API Keys Disclosure
5.3
CVE-2025-13997
Mar 22, 2026
Researcher: Ulyses Saicha
King Addons for Elementor <= 51.1.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
6.4
CVE-2025-7960
Dec 12, 2025
Researcher: zer0gh0st
King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege Escalation
9.8
CVE-2025-8489
Oct 30, 2025
Researcher: Peter Thaleikis
King Addons for Elementor <= 51.1.36 - Unauthenticated Privilege Escalation
9.8
CVE-2025-6325
Oct 21, 2025
Researcher: Abu Hurayra (HurayraIIT)
King Addons for Elementor <= 51.1.36 - Unauthenticated Arbitrary File Upload
9.8
CVE-2025-6327
Oct 21, 2025
Researcher: Najib Sinjari
King Addons for Elementor <= 51.1.62 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-62887
Aug 18, 2025
Researcher: Abu Hurayra (HurayraIIT)
King Addons for Elementor <= 51.1.62 - Missing Authorization
4.3
CVE-2025-62889
Aug 18, 2025
Researcher: Abu Hurayra (HurayraIIT)
King Addons for Elementor <= 24.12.58 - Missing Authorization
4.3
CVE-2025-30926
Mar 27, 2025
Researcher: João Pedro Soares de Alcântara
Title Status CVE ID CVSS Researchers Date
King Addons for Elementor <= 51.1.62 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'form_page_id' Parameter Patched CVE-2026-15284 6.4 Naoya Takahashi (nakko) June 15, 2026
King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder <= 51.1.62 - Authenticated (Subscriber+) Stored Cross-Site Scripting Patched CVE-2026-48870 6.4 thevietronin June 2, 2026
King Addons for Elementor <= 51.1.38 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Widgets Patched CVE-2025-13535 6.4 Webbernaut March 31, 2026
King Addons for Elementor <= 51.1.49 - Unauthenticated API Keys Disclosure Patched CVE-2025-13997 5.3 Ulyses Saicha March 22, 2026
King Addons for Elementor <= 51.1.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets Unpatched CVE-2025-7960 6.4 zer0gh0st December 12, 2025
King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege Escalation Patched CVE-2025-8489 9.8 Peter Thaleikis October 30, 2025
King Addons for Elementor <= 51.1.36 - Unauthenticated Privilege Escalation Patched CVE-2025-6325 9.8 Abu Hurayra (HurayraIIT) October 21, 2025
King Addons for Elementor <= 51.1.36 - Unauthenticated Arbitrary File Upload Patched CVE-2025-6327 9.8 Najib Sinjari October 21, 2025
King Addons for Elementor <= 51.1.62 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-62887 6.4 Abu Hurayra (HurayraIIT) August 18, 2025
King Addons for Elementor <= 51.1.62 - Missing Authorization Patched CVE-2025-62889 4.3 Abu Hurayra (HurayraIIT) August 18, 2025
King Addons for Elementor <= 24.12.58 - Missing Authorization Patched CVE-2025-30926 4.3 João Pedro Soares de Alcântara March 27, 2025

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation