Vulnerabilidades en KingAddons
7 resultadosAnálisis Vexday
KingAddons apresenta footprint reduzido com 1 CVE registrada, sem incidentes de exploração ativa detectados. A vulnerabilidade identificada é do tipo Cross-Site Scripting (CWE-79) e foi publicada recentemente (últimos 90 dias), demandando atenção para remediação embora o risco imediato de ataque seja baixo.
CVE-2025-8489CRITICALKing Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege EscalationEPSS 9.6%CVE-2026-15284MEDIUMKing Addons for Elementor <= 51.1.62 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'form_page_id' ParameterEPSS 0.4%CVE-2026-54839HIGHWordPress Trinity Backup – Backup, Migrate, Restore, Clone & Schedule Backups plugin <= 2.0.9 - Sensitive Data Exposure vulnerabilityEPSS 0.4%CVE-2025-13535MEDIUMKing Addons for Elementor <= 51.1.38 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple WidgetsEPSS 0.2%CVE-2025-13997MEDIUMKing Addons for Elementor <= 51.1.49 - Unauthenticated API Keys DisclosureEPSS 0.2%CVE-2025-7960MEDIUMKing Addons for Elementor <= 51.1.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple WidgetsEPSS 0.2%CVE-2026-97298MEDIUMWordPress King Addons for Elementor plugin <= 51.1.86 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%