CVE-2026-84903: Unknown King Addons For Elementor

Low severity, CVSS 2.7. EPSS: 0.3% chance of exploitation in the next 30 days.

The King Addons for Elementor WordPress plugin before 51.1.81 does not perform any capability, post-status, or password check before rendering the content of a user-supplied post, allowing users with Contributor-level access and above to read the content of private, draft, pending, and password-protected posts they are not authorized to access.

Affected products

• Unknown King Addons For Elementor: before 51.1.81 (fixed in 51.1.81)

Published 2026-09-18. Last modified 2026-09-18.