Critical flaw in WordPress add-on for Elementor exploited in attacks

Attackers are actively exploiting CVE-2025-8489, a critical privilege escalation vulnerability in the King Addons for Elementor WordPress plugin. The flaw allows attackers to gain administrative permissions during user registration. This represents an active exploitation scenario affecting WordPress sites using the vulnerable plugin, posing significant security risks to website administrators and users.