CVE-2025-8489

The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor plugin for WordPress is vulnerable to privilege escalation in versions 24.12.92 to 51.1.14 . This is due to the plugin not properly restricting the roles that users can register with. This makes it possible for unauthenticated attackers to register with administrator-level user accounts.

• CWE-269

• https://plugins.trac.wordpress.org/browser/king-addons/tags/24.12.93/includes/widgets/Login_Register_Form/Login_Register_Form_Ajax.php#L353
• https://plugins.trac.wordpress.org/browser/king-addons/tags/51.1.35/includes/widgets/Login_Register_Form/Login_Register_Form_Ajax.php#L160
• https://www.wordfence.com/threat-intel/vulnerabilities/id/a1bb2b06-9a3b-4428-8624-26a1202fe3b0?source=cve

Published

Oct 31, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-8483The The Discussion Board – WordPress Forum Plugin plugin for…6.3
• CVE-2025-8484The Code Quality Control Tool plugin for WordPress is vulner…5.3
• CVE-2025-8485An improper permissions vulnerability was reported in Lenovo…7.3
• CVE-2025-8486A potential vulnerability was reported in PC Manager that co…8.5
• CVE-2025-8487The Kubio AI Page Builder plugin for WordPress is vulnerable…5.4
• CVE-2025-8488The Ultimate Addons for Elementor (Formerly Elementor Header…4.3
• CVE-2025-8490The All-in-One WP Migration and Backup plugin for WordPress …4.4
• CVE-2025-8491The Easy restaurant menu manager plugin for WordPress is vul…4.3
• CVE-2025-8492The Salon Booking System, Appointment Scheduling for Salons,…5.3
• CVE-2025-8493A vulnerability classified as critical was found in code-pro…9.8
• CVE-2025-8494A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-8495A vulnerability, which was classified as critical, was found…9.8