CVE-2025-6325PoC

MEDIUMCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch affected systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Incorrect Privilege Assignment vulnerability in KingAddons.com King Addons for Elementor king-addons allows Privilege Escalation.This issue affects King Addons for Elementor: from n/a through <= 51.1.36.

Back to dashboard

4.0/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/Wordpress/Plugin/king-addons/vulnerability/wordpress-king-addons-for-elementor-plugin-51-1-36-privilege-escalation-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-266

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Public PoC and exploit tooling are both present
Patch or workaround signal is available
4 mentions across 3 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 2 signals
PoC mentioned or linked in 3 signals
Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
General: 1 classified signal
Peaked 1d ago at 2 mentions (2026-09-23); latest day: 1
4 total mentions across 3 days

Deep dive

Activity timeline4 mentions / 3d

Signal classification3 categories

PoC

250.0%

Exploit

125.0%

General

125.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-22	1	PoC1
2026-09-23	2	Exploit1General1
2026-09-24	1	PoC1

Full discourse4 posts

Rıdvan Yağlı@ridvanyagli46d
PoC
🔴 WordPress King Addons for Elementor eklentisi için PoC yayınlandı. King Addons for Elementor ≤ 51.1.36 için yayınlanan Dual Exploit (CVE-2025-6325 + CVE-2025-6327) PoC, kimlik doğrulama gerektirmeden: • CVE-2025-6325 — Privilege Escalation -> Administrator hesabı oluşturma • CVE-2025-6327 — Arbitrary File Upload -> RCE açıkların sömürülebilirliğini test ediyor. Yama: 51.1.37 ve üzeri sürümlere güncelleyin. PoC: https://github.com/JohenLastGen-JLG/CVE-2025-6325_CVE-2025-6327
Post summary
A PoC for two critical WordPress vulnerabilities (CVE-2025-6325 and CVE-2025-6327) in the King Addons for Elementor plugin has been published on GitHub, demonstrating privilege escalation to admin account creation and arbitrary file upload leading to RCE. An update to version 51.1.37 is recommended as a fix. No active exploitation claims are made in the text.
0702291.3K
2.5K followersView on X
ExploitGrid@exploitgrid45d
General
🛡️ #ExploitGrid Daily #Threat Digest Critical Exploits disclosed today: CVE-2025-6325, CVE-2025-6327 CVE-2024-21413 CVE-2026-14894 CVE-2026-90817 CVE-2026-90817 ..🧵👇
Post summary
The tweet announces the disclosure of several CVEs as critical exploits but provides no PoCs, exploit tools, patches, or technical details, leaving their status ambiguous.
1101055
227 followersView on X
ExploitGrid@exploitgrid45d
Exploit
[EXPLOIT] CVE-2025-6325, CVE-2025-6327 [CRITICAL/PoC] CVE-2025-6325_CVE-2025-6327 🔗 https://exploitgrid.net/exploits/7373eb37-1368-4af1-921e-612870f549ef
Post summary
The post labels CVE-2025-6325 and CVE-2025-6327 as critical and PoC-related, while also explicitly marking it as an exploit and linking to an exploit entry. The primary takeaway is that exploit/PoC material is being highlighted or shared.
1001042
227 followersView on X
ExploitGrid@exploitgrid44d
PoC
💀 CRITICAL Exploits Trending ├ CVE-2025-6325 / CVE-2025-6327 · PoC live ├ CVE-2024-21413 — "MonikerLink" · PoC live └ CVE-2026-14894 · CVE-2026-90817 · PoC live
Post summary
The tweet highlights that several critical CVEs have live Proof‑of‑Concept exploits currently trending, indicating the availability of exploit code but no patches or technical details are provided.
1000039
308 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2025-6325

Rıdvan Yağlı[verified]@ridvanyagliPoC

A PoC for two critical WordPress vulnerabilities (CVE-2025-6325 and CVE-2025-6327) in the King Addons for Elementor plugin has been published on GitHub, demonstrating privilege escalation to admin account creation and arbitrary file upload leading to RCE. An update to version 51.1.37 is recommended as a fix. No active exploitation claims are made in the text.

ExploitGrid@exploitgridGeneral

The tweet announces the disclosure of several CVEs as critical exploits but provides no PoCs, exploit tools, patches, or technical details, leaving their status ambiguous.

ExploitGrid@exploitgridExploit

The post labels CVE-2025-6325 and CVE-2025-6327 as critical and PoC-related, while also explicitly marking it as an exploit and linking to an exploit entry. The primary takeaway is that exploit/PoC material is being highlighted or shared.

ExploitGrid@exploitgridPoC

The tweet highlights that several critical CVEs have live Proof‑of‑Concept exploits currently trending, indicating the availability of exploit code but no patches or technical details are provided.