KingAddons

Products

Exploited and recent CVEs

  • CVE-2026-97298 Medium 6.5 WordPress King Addons for Elementor plugin <= 51.1.86 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-15284 Medium 6.4 King Addons for Elementor <= 51.1.62 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'form_page_id' Parameter 0.4%
  • CVE-2026-54839 High 7.5 WordPress Trinity Backup – Backup, Migrate, Restore, Clone & Schedule Backups plugin <= 2.0.9 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2025-13535 Medium 6.4 King Addons for Elementor <= 51.1.38 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Widgets 0.2%
  • CVE-2025-13997 Medium 5.3 King Addons for Elementor <= 51.1.49 - Unauthenticated API Keys Disclosure 0.2%
  • CVE-2025-7960 Medium 6.4 King Addons for Elementor <= 51.1.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets 0.2%
  • CVE-2025-8489 Critical 9.8 King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege Escalation 9.6%