Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: King Addons for Elementor 51.1.81 Clear all filters
TI-2026-58364 CVE-2026-84904 · GHSA-pv3c-9qhj-4h2p

King Addons for Elementor 51.1.56 - 51.1.80 - Author+ Missing Authorization via Image Optimizer

Priority LOW 18

The King Addons for Elementor WordPress plugin before 51.1.81 does not perform per-object authorization checks on a group of image-optimization actions, gating them only on a coarse capability that lower-privileged users…

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00255 Published 2026-09-18 Fixed in 51.1.81 CWE-862
TI-2026-58363 CVE-2026-84903 · GHSA-gwpw-wwmj-xgqp

King Addons for Elementor < 51.1.81 - Contributor+ Private Post Content Disclosure via kng_maintenance_page Shortcode

Priority LOW 13

The King Addons for Elementor WordPress plugin before 51.1.81 does not perform any capability, post-status, or password check before rendering the content of a user-supplied post, allowing users with Contributor-level ac…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00316 Published 2026-09-18 Fixed in 51.1.81 CWE-200
TI-2026-58362 CVE-2026-84902 · GHSA-49x6-35hm-mhc5

King Addons for Elementor < 51.1.81 - Contributor+ Stored XSS via Template Catalog Import

Priority LOW 32

The King Addons for Elementor WordPress plugin before 51.1.81 does not perform an object-level authorization check when importing template content into a page, allowing users with contributor-level access and above to ov…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00431 Published 2026-09-18 Fixed in 51.1.81 CWE-79