PT-2025-45328 · WordPress · Qi Addons For Elementor

Published 2025-11-06 · Updated 2025-11-06 · CVE-2025-6325

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions King Addons for Elementor versions through 51.1.36

Description An incorrect privilege assignment exists in King Addons for Elementor, allowing for privilege escalation. The issue allows an attacker to gain elevated privileges within the system.

Recommendations Update King Addons for Elementor to a version later than 51.1.36.

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2025-6325

Affected Products

Qi Addons For Elementor

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-6325 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/king-addons/vulnerability/wordpress-king-addons-for-elementor-plugin-51-1-36-privilege-escalation-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/king-addons/vulnerability/wordpress-king-addons-for-elementor-plugin-51-1-36-privilege-escalation-vulnerability · Note
• https://patchstack.com/database/Wordpress/Plugin/king-addons/vulnerability/wordpress-king-addons-for-elementor-plugin-51-1-36-privilege-escalation-vulnerability?_s_id=cve · Note
• https://t.me/CVEtracker/36686 · Telegram Post