CVE-2025-8489 - Vulnerability Details

Related Threat Clusters

• Exploitation of CVE-2025-8489 in King Addons for Elementor Plugin

  A critical privilege escalation vulnerability (CVE-2025-8489) in the King Addons for Elementor plugin for WordPress is being actively exploited, allowing attackers to gain administrative permissions. The attacks began…

  3 articles · Updated December 5, 2025
• Critical King Addons Vulnerability Allows Unauthorized WordPress Admin Access

  A vulnerability in the King Addons for Elementor WordPress plugin, tracked as CVE-2025-8489, allows unauthenticated users to register and gain admin privileges on affected sites. This flaw, with a CVSS score of 9.8, is…

  2 articles · Updated December 3, 2025

Recent Intelligence Reports

• Critical King Addons flaw under attack — Scworld · December 5, 2025
• King Addons flaw lets anyone become WordPress admin — Securityaffairs.Co · December 3, 2025

Related Entities