Hackers are exploiting a King Addons flaw (CVE-2025-8489) that lets anyone register and instantly gain admin privileges on WordPress sites. Hackers are exploiting a critical vulnerability, tracked as CVE-2025-8489 (CVSS score of 9.8), in the WordPress plugin King Addons for Elementor that allows unauthenticated users to create admin accounts via a registration privilege bug. King […]
First seen on securityaffairs.com
Jump to article: securityaffairs.com/185286/hacking/king-addons-flaw-lets-anyone-become-wordpress-admin.html
