CVE-2026-84904
King Addons for Elementor 51.1.56 - 51.1.80 - Author+ Missing Authorization via Image Optimizer
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The King Addons for Elementor WordPress plugin before 51.1.81 does not perform per-object authorization checks on a group of image-optimization actions, gating them only on a coarse capability that lower-privileged users also hold and never confirming ownership of the targeted object, allowing authenticated users with author-level access and above to disclose absolute file paths for, overwrite the bytes of, and site-wide re-reference media belonging to other users, including administrators.
| Vendor | unknown |
| Product | king addons for elementor |
| Published | Sep 18, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown king addons for elementor
Be the first to know when new unknown vulnerabilities affecting unknown king addons for elementor are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / King Addons for Elementor
51.1.56 < 51.1.81
References
Credits
Artus KG WPScan