Elementor — Cyber Threats, Attacks & Incidents

Overview

Elementor is a widely used WordPress page builder/plugin platform that enables visual site design and layout customization. Recent reports highlight critical vulnerabilities in Elementor's ecosystem (notably King Addons) that can grant attackers admin privileges or full control of WordPress sites, underscoring significant risk to millions of WordPress deployments and active exploitation.

Related Threat Clusters

• Multiple Critical Vulnerabilities Disclosed Affecting Various Products

  A series of critical vulnerabilities (CVEs) have been disclosed affecting multiple products, all with a CVSS score of 9.8. CVE-2026-25775 allows unauthorized firmware operations on SenseLive X3050. CVE-2026-8935 enables…

  16 articles · Updated June 16, 2026
• W3 Total Cache Vulnerability Affects 1 Million WordPress Sites

  A command injection vulnerability in the W3 Total Cache plugin has exposed approximately 1 million WordPress sites to remote code execution (RCE) attacks. The vulnerability allows attackers to execute arbitrary code on…

  12 articles · Updated November 18, 2025
• 20,000 WordPress Sites Compromised by Backdoor Vulnerability

  A backdoor vulnerability in the LA-Studio Element Kit for Elementor has compromised over 20,000 WordPress sites, allowing attackers to create admin accounts without authentication. This vulnerability, tracked as…

  3 articles · Updated January 23, 2026
• Exploitation of CVE-2025-8489 in King Addons for Elementor Plugin

  A critical privilege escalation vulnerability (CVE-2025-8489) in the King Addons for Elementor plugin for WordPress is being actively exploited, allowing attackers to gain administrative permissions. The attacks began…

  3 articles · Updated December 5, 2025
• W3 Total Cache Plugin Vulnerability Exposes Over One Million WordPress Sites

  A critical vulnerability, tracked as CVE-2025-9501, has been identified in the W3 Total Cache WordPress plugin, affecting all versions prior to 2.8.13. This flaw allows unauthenticated attackers to execute arbitrary PHP…

  4 articles · Updated November 21, 2025
• Critical Elementor Plugin Vulnerability Allows WordPress Admin Takeover

  A critical vulnerability in the Elementor plugin for WordPress has been identified, allowing attackers to gain administrative control over affected sites. This flaw poses a significant risk to WordPress users who…

  3 articles · Updated December 3, 2025
• King Addons for Elementor Vulnerability Compromises WordPress Sites

  A critical vulnerability in the King Addons for Elementor plugin has been exploited, leading to the takeover of multiple WordPress sites. The security firm has indicated that successful exploitation results in full site…

  2 articles · Updated December 3, 2025
• Critical King Addons Vulnerability Allows Unauthorized WordPress Admin Access

  A vulnerability in the King Addons for Elementor WordPress plugin, tracked as CVE-2025-8489, allows unauthenticated users to register and gain admin privileges on affected sites. This flaw, with a CVSS score of 9.8, is…

  2 articles · Updated December 3, 2025

Recent Intelligence Reports

• CRITICAL: CVE-2026-49105 (CVSS 9.8) — multiple products — Lyrie.Ai · June 16, 2026
• 20,000 WordPress Sites Affected by Backdoor Vulnerability Allowing Malicious Admin User Creation — Cybersecuritynews · January 23, 2026
• King Addons flaw lets anyone become WordPress admin — Securityaffairs.Co · December 3, 2025
• Critical flaw in WordPress add — Bleepingcomputer · December 3, 2025
• Critical King Addons Vulnerability Exploited to Hack WordPress Sites — Securityweek · December 3, 2025
• Critical King Addons Vulnerability Exploited to Hack WordPress Sites — Feeds.Feedburner · December 3, 2025
• Critical Elementor Plugin Flaw Allows Attackers to Seize WordPress Admin Control — Gbhackers · December 3, 2025
• Cache of Doom: WordPress Plugin Flaw Exposes Millions to Cyber Havoc — Webpronews · November 21, 2025

Related Entities