King Addons Elementor Critical Flaw: Administrator Bypass Alert
A security advisory detailing a severe vulnerability, officially designated CVE-2025-8489, found within the widely-used “King Addons for Elementor” WordPress plugin. This critical flaw allows any unauthenticated attacker to create an administrator account, facilitating a complete site takeover without needing existing credentials. The text stresses that this high-severity weakness (rated 9.8 out of 10) led to a massive spike in automated attacks immediately following its public disclosure, confirming the urgency of patching. Website owners are mandated to update the plugin to version 51.1.35 or higher and perform a thorough audit for previously established malicious administrator accounts. The source concludes by using this critical security event to market the services of Technijian, a firm offering comprehensive WordPress security management and incident response in Southern California.
