Vulnerability · Published Sep 18, 2026 · Assigned by WPScan
CVE-2026-84903King Addons for Elementor < 51.1.81 - Contributor+ Private Post Content Disclosure via kng_maintenance_page Shortcode
Low 2.7
In plain English
A low-severity information exposure in King Addons for Elementor from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Severity (CVSS 3.1)2.7Low
Exploit odds (30 days)0.3%top 75.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The King Addons for Elementor WordPress plugin before 51.1.81 does not perform any capability, post-status, or password check before rendering the content of a user-supplied post, allowing users with Contributor-level access and above to read the content of private, draft, pending, and password-protected posts they are not authorized to access.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | King Addons for Elementor | 0 – before 51.1.81 |
Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
References
- https://wpscan.com/vulnerability/57853db6-c9e0-4b0a-8a57-8287f0e85eea/ exploit, vdb-entry, technical-description