Technical impact
An Incorrect Privilege Assignment flaw in King Addons for Elementor version 51.1.36 and earlier lets attackers elevate privileges on a WordPress site. By gaining higher-level access, an adversary can bypass normal role restrictions and gain administrative control or alter site content.
Affected Systems
All installations of KingAddons.com’s King Addons for Elementor plugin from the earliest release up to version 51.1.36 are affected.
Risk and Exploitability
The CVSS score of 9.8 marks this flaw as critical, while its EPSS of less than 1% suggests low current exploitation likelihood. The vulnerability is not catalogued in CISA KEV. Based on the description, it is inferred that the plugin’s privilege escalation could be leveraged through the WordPress admin interface, potentially giving an attacker full site control if they possess any level of access.
