Critical · published October 31, 2025
🚨 Unauthenticated attackers can register as admins — talk about rolling out the welcome mat! 🔥 This vulnerability is like a hotel that forgets to verify guest IDs, allowing anyone to book the penthouse suite just by claiming to be someone else. Without proper checks, malicious users can cozy up to all the admin privileges they want. If exploited, an attacker could gain full control over the WordPress site, allowing them to change settings, install malicious plugins, or even wipe the entire site clean! This is absolutely devastating for site owners and could lead to significant data loss and damage.
This vulnerability is like a hotel that forgets to verify guest IDs, allowing anyone to book the penthouse suite just by claiming to be someone else. Without proper checks, malicious users can cozy up to all the admin privileges they want. The King Addons for Elementor plugin fails to restrict user registration roles adequately, allowing unauthenticated users to register as administrator accounts, bypassing usual security measures.
If exploited, an attacker could gain full control over the WordPress site, allowing them to change settings, install malicious plugins, or even wipe the entire site clean! This is absolutely devastating for site owners and could lead to significant data loss and damage. To protect your site, update the King Addons plugin to version 51.1.15 or later immediately. Additionally, review your user registration settings and implement stronger validation checks to prevent unauthorized access. You've got this! Follow these steps, and your website will be secure in no time! 🛡️