Unknown King Addons For Elementor vulnerabilities

5 CVEs affecting Unknown King Addons For Elementor, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-84904, published 2026-09-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-84902, published 2026-09-18. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. The King Addons for Elementor WordPress plugin before 51.1.81 does not perform an object-level authorization check when importing template content into a page, allowing users with contributor-level…
CVE-2026-84896, published 2026-09-05. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. The King Addons for Elementor WordPress plugin before 51.1.77 does not escape a widget display-style setting before outputting it in an HTML attribute, allowing users with Contributor-level access…
CVE-2026-84903, published 2026-09-18. Low severity, CVSS 2.7. EPSS: 0.3% chance of exploitation in the next 30 days. The King Addons for Elementor WordPress plugin before 51.1.81 does not perform any capability, post-status, or password check before rendering the content of a user-supplied post, allowing users…
CVE-2026-84904, published 2026-09-18. Low severity, CVSS 3.8. EPSS: 0.3% chance of exploitation in the next 30 days. The King Addons for Elementor WordPress plugin before 51.1.81 does not perform per-object authorization checks on a group of image-optimization actions, gating them only on a coarse capability that…
CVE-2026-14841, published 2026-08-02. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. The King Addons for Elementor WordPress plugin before 51.1.76 does not escape a user-supplied grid setting before reflecting it into an HTML attribute in an unauthenticated AJAX response, allowing…