Critical Elementor Plugin Vulnerability Let Attackers Takeover WordPress Site Admin Control

Cybersecuritynews •Tushar Subhra Dutta • December 3, 2025

A serious vulnerability has been discovered in the King Addons for Elementor WordPress plugin, affecting more than 10,000 active installations worldwide. The flaw allows unauthenticated attackers to gain full administrative control over WordPress websites by simply registering a new account with administrator privileges. The vulnerability was first reported on July 24th, 2025, and has now […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Elementor Plugin Vulnerability Allows WordPress Admin Takeover A critical vulnerability in the Elementor plugin for WordPress has been identified, allowing attackers to gain administrative control over affected sites. This flaw poses a significant risk to WordPress users who utilize the Elementor plugin, potentially leading to unauthorized access and site manipulation. 3 sources 45

Extracted Entities

Platforms (2)

King Addons For Elementor WordPress