Critical flaw in WordPress add-on for Elementor exploited in attacks

Attackers are actively exploiting a critical privilege escalation vulnerability (CVE-2025-8489) in the King Addons for Elementor plugin for WordPress. The flaw allows attackers to gain administrative permissions during the user registration process. This is a critical severity vulnerability that is being exploited in live attacks against WordPress sites using this popular Elementor add-on plugin.