Plugin icon

King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder

king-addons

Vulnerabilities:

19

Last Updated:

September 28, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-09-30
Title
King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder < 51.1.87 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 51.1.87
CVSS
5.5 (medium)
Published
2026-09-24
Title
King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder < 51.1.86 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 51.1.86
CVSS
5.5 (medium)
Published
2026-09-17
Title
King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder < 51.1.82 - Unauthenticated Insecure Direct Object Reference
Fixed in
Fixed in 51.1.82
CVSS
5.3 (medium)
Published
2026-09-16
Title
King Addons for Elementor < 51.1.81 - Contributor+ Private Post Content Disclosure via kng_maintenance_page Shortcode
Fixed in
Fixed in 51.1.81
CVSS
2.7 (low)
Published
2026-09-16
Title
King Addons for Elementor < 51.1.81 - Contributor+ Stored XSS via Template Catalog Import
Fixed in
Fixed in 51.1.81
CVSS
6.8 (medium)
Published
2026-09-16
Title
King Addons for Elementor 51.1.56 - 51.1.80 - Author+ Missing Authorization via Image Optimizer
Fixed in
Fixed in 51.1.81
CVSS
3.8 (low)
Published
2026-09-03
Title
King Addons for Elementor < 51.1.77 - Contributor+ Stored XSS via Magazine Grid Widget
Fixed in
Fixed in 51.1.77
CVSS
6.8 (medium)
Published
2026-07-20
Title
King Addons for Elementor < 51.1.76 - Reflected XSS via Posts Grid Widget
Fixed in
Fixed in 51.1.76
CVSS
7.1 (high)
Published
2026-06-15
Title
King Addons for Elementor < 51.1.63 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'form_page_id' Parameter
Fixed in
Fixed in 51.1.63
CVSS
6.4 (medium)
Published
2026-06-02
Title
King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder < 51.1.63 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Fixed in
Fixed in 51.1.63
CVSS
6.4 (medium)
Published
2026-03-31
Title
King Addons for Elementor < 51.1.54 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Widgets
Fixed in
Fixed in 51.1.54
CVSS
5.5 (medium)
Published
2026-03-22
Title
King Addons for Elementor < 51.1.51 - Unauthenticated API Keys Disclosure
Fixed in
Fixed in 51.1.51
CVSS
5.3 (medium)
Published
2025-12-12
Title
King Addons for Elementor < 51.1.54 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Fixed in
Fixed in 51.1.54
CVSS
5.5 (medium)
Published
2025-10-30
Title
King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 51.1.35
CVSS
9.8 (critical)
Published
2025-10-21
Title
King Addons for Elementor < 51.1.37 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 51.1.37
CVSS
9.8 (critical)
Published
2025-10-21
Title
King Addons for Elementor < 51.1.37 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 51.1.37
CVSS
9.8 (critical)
Published
2025-08-18
Title
King Addons for Elementor < 51.1.63 - Contributor+ Stored XSS
Fixed in
Fixed in 51.1.63
CVSS
5.9 (medium)
Published
2025-08-18
Title
King Addons for Elementor < 51.1.63 - Missing Authorization
Fixed in
Fixed in 51.1.63
CVSS
4.3 (medium)
Published
2025-03-27
Title
King Addons for Elementor < 24.12.59 - Missing Authorization
Fixed in
Fixed in 24.12.59
CVSS
4.3 (medium)