CVE-2025-6327

WordPress King Addons for Elementor plugin <= 51.1.36 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in KingAddons.com King Addons for Elementor king-addons allows Upload a Web Shell to a Web Server.This issue affects King Addons for Elementor: from n/a through <= 51.1.36.

Affected

KingAddons.com · King Addons for Elementor

CVSS v3.1 PATCHSTACK

10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

0.45% chance of exploitation in the next 30 days, 38th percentile

Published

2025-11-06

Updated

2026-04-28

Proof-of-concept exploits (1)

• JohenLastGen-JLG/CVE-2025-6325_CVE-2025-63271★ · 2026-09-21

References

• CVE Record
• NVD entry

Related

• CVE-2025-6325
• CVE-2026-11961
• CVE-2026-18351
• CVE-2026-60137
• CVE-2026-63030