WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder

Elementor addons: Elementor widgets, Elementor templates, 80+ widgets, 4 000+ templates and sections, Mega Menu, Popup Builder, WooCommerce, AI tools.

12Reported vulnerabilities
9.8Highest CVSS score
51.1.77Latest version
10,000+Active installs

What to do now

Update King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder to 51.1.76 or later. 11 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 16, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2025-8489 Critical 9.8 9.3% 51.1.14 and earlier 51.1.35 October 31, 2025
CVE-2025-6327 Critical 9.8 0.5% 51.1.36 and earlier 51.1.37 October 21, 2025
CVE-2025-6325 Critical 9.8 0.4% 51.1.36 and earlier 51.1.37 October 21, 2025
CVE-2026-15284 Medium 6.4 0.4% 0 to 51.1.62 (inclusive) 51.1.63 July 10, 2026
CVE-2026-48870 Medium 6.4 0.2% 51.1.62 and earlier 51.1.63 June 2, 2026
CVE-2025-13535 Medium 6.4 0.2% 0 to 51.1.53 (inclusive) 51.1.54 April 1, 2026
CVE-2025-7960 Medium 6.4 0.2% 0 to 51.1.39 (inclusive) — December 13, 2025
CVE-2025-62887 Medium 6.4 0.2% 51.1.62 and earlier 51.1.63 August 18, 2025
CVE-2026-14841 Medium 6.1 0.2% 51.1.75 and earlier 51.1.76 July 20, 2026
CVE-2025-13997 Medium 5.3 0.2% 0 to 51.1.49 (inclusive) 51.1.51 March 23, 2026
CVE-2025-62889 Medium 4.3 0.3% 51.1.62 and earlier 51.1.63 August 18, 2025
CVE-2025-30926 Medium 4.3 0.3% 24.12.58 and earlier 24.12.59 March 27, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.