WP Security CheckVulnerability data as of October 22, 2026

Known vulnerabilities in King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder

Elementor addons: Elementor widgets, Elementor templates, 80+ widgets, 4 000+ templates and sections, Mega Menu, Popup Builder, WooCommerce, AI tools.

19Reported vulnerabilities
9.8Highest CVSS score
51.1.77Latest version
10,000+Active installs

What to do now

Update King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder to 51.1.87 or later. 19 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 16, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2025-8489 Critical 9.8 9.6% 51.1.14 and earlier 51.1.35 October 31, 2025
CVE-2025-6327 Critical 9.8 0.4% 51.1.36 and earlier 51.1.37 October 21, 2025
CVE-2025-6325 Critical 9.8 0.4% 51.1.36 and earlier 51.1.37 October 21, 2025
CVE-2026-84902 Medium 6.4 0.4% 51.1.80 and earlier 51.1.81 September 16, 2026
CVE-2026-84896 Medium 6.4 0.4% Before 51.1.77 51.1.77 September 5, 2026
CVE-2026-15284 Medium 6.4 0.4% 0 to 51.1.62 (inclusive) 51.1.63 July 10, 2026
CVE-2026-97298 Medium 6.4 0.1% 51.1.86 and earlier 51.1.87 September 30, 2026
CVE-2026-96835 Medium 6.4 0.2% 51.1.85 and earlier 51.1.86 September 24, 2026
CVE-2026-48870 Medium 6.4 0.2% 51.1.62 and earlier 51.1.63 June 2, 2026
CVE-2025-13535 Medium 6.4 0.2% 0 to 51.1.53 (inclusive) 51.1.54 April 1, 2026
CVE-2025-7960 Medium 6.4 0.2% 0 to 51.1.39 (inclusive) 51.1.54 December 13, 2025
CVE-2025-62887 Medium 6.4 0.2% 51.1.62 and earlier 51.1.63 August 18, 2025
CVE-2026-14841 Medium 6.1 0.3% 51.1.75 and earlier 51.1.76 July 20, 2026
CVE-2026-66575 Medium 5.3 0.3% 51.1.81 and earlier 51.1.82 September 17, 2026
CVE-2025-13997 Medium 5.3 0.2% 0 to 51.1.49 (inclusive) 51.1.51 March 23, 2026
CVE-2026-84904 Medium 4.3 0.3% 51.1.80 and earlier 51.1.81 September 16, 2026
CVE-2026-84903 Medium 4.3 0.3% 51.1.80 and earlier 51.1.81 September 16, 2026
CVE-2025-62889 Medium 4.3 0.3% 51.1.62 and earlier 51.1.63 August 18, 2025
CVE-2025-30926 Medium 4.3 0.3% 24.12.58 and earlier 24.12.59 March 27, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.