Tuesday, August 11, 2026
LIVEThe Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///The Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///
Subscribe
Cyber Security
Independent · Digital
Thehackingpost
RSSSubscribe
CybersecurityAI-assisted

Critical Elementor Plugin Vulnerability Let Attackers Takeover WordPress Site Admin Control

A critical security flaw has been identified in the "King Addons for Elementor" WordPress plugin, putting numerous websites at risk. The vulnerability, designated as CVE-2025-8489, enables unauthenticated attackers to register new accounts with…

NBy Noah RedmondDec 03, 20251 min read

A critical security flaw has been identified in the "King Addons for Elementor" WordPress plugin, putting numerous websites at risk. The vulnerability, designated as CVE-2025-8489, enables unauthenticated attackers to register new accounts with administrative privileges by exploiting an insecure registration function within the plugin.

This vulnerability impacts plugin versions 24.12.92 to 51.1.14, which are currently installed on over 10,000 active sites. The flaw stems from inadequate restrictions on user roles during the registration process, allowing attackers to create admin-level accounts without prior access.

Attackers can execute this exploit by crafting a request to the WordPress admin-ajax.php endpoint, setting the "user_role" field to "administrator". This grants them full control over the affected website, including the ability to install malicious plugins, modify content, and redirect users to harmful sites.

Attribute Details

Vulnerability Name King Addons for Elementor - Unauthenticated Privilege Escalation

CVE ID CVE-2025-8489

CVSS Rating 9.8 (Critical)

Vulnerability Type Unauthenticated Privilege Escalation

A critical security flaw has been identified in the "King Addons for Elementor" WordPress plugin, putting numerous websites at risk.
Noah Redmond · Thehackingpost

Affected Plugin King Addons for Elementor

The plugin developer has released a patched version, 51.1.35, as of September 25, 2025. Wordfence implemented a firewall rule to prevent attacks for Premium, Care, and Response customers on August 4, 2025, extending this protection to free users on September 3, 2025.

Despite these measures, active exploitation began shortly after the vulnerability was publicly disclosed on October 30, 2025. Wordfence reports over 48,400 blocked exploit attempts, with a notable increase in attack traffic on November 9 and 10. Key IP addresses associated with these attacks include 45.61.157.120 and 2602:fa59:3:424::1.

IP Address Blocked Requests

45.61.157.120 28,900+

2602:fa59:3:424::1 16,900+

Advertisement

182.8.226.228 300+

138.199.21.230 100+

206.238.221.25 100+

Update to version 51.1.35 or later immediately. Check for unknown or suspicious administrator accounts. Review server and access logs for requests from known attacking IPs. Monitor for unusual changes to content, plugins, or themes.

Site owners suspecting compromise should seek professional incident response and cleanup services promptly.

Based on reporting by Cyber Security News.

AI transparency. This article was produced with the assistance of artificial intelligence and published under human editorial oversight. AI systems can make mistakes. Read how we use AI (EU AI Act, Art. 50).
Related Stories
Cybersecurity

Why Fintech Banking Platforms Are Reducing Operational Costs by 40%

Paige Monroe · Mar 26, 2026
Cybersecurity

Dogecoin Price Prediction: SHIB Burns 172M Tokens as Pepeto Exchange Earns From Every Trade

Eric Wallace · Mar 26, 2026
Cybersecurity

Solana Price Prediction: SOL Holds $86 With Commodity Status as Pepeto Targets Bigger Returns

Zachary Burns · Mar 26, 2026
Cybersecurity

Open Directory Malware Campaign Uses Obfuscated VBS, PNG Loaders and RAT Payloads

Joseph Cain · Mar 26, 2026