VulnSocial

CVE-2025-6327PoC

MEDIUMCVSS 10.0 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Unrestricted Upload of File with Dangerous Type vulnerability in KingAddons.com King Addons for Elementor king-addons allows Upload a Web Shell to a Web Server.This issue affects King Addons for Elementor: from n/a through <= 51.1.36.

Back to dashboard
4.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-434

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC and exploit tooling are both present
  • Patch or workaround signal is available
  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 3 signals
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-09-23); latest day: 1
  • 4 total mentions across 3 days

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-09-22: 1Mentions · 2026-09-23: 2Mentions · 2026-09-24: 1PoC Mentioned / Linked · 2026-09-22: 1PoC Mentioned / Linked · 2026-09-23: 1PoC Mentioned / Linked · 2026-09-24: 1Exploit Tool / Code · 2026-09-22: 1Patch / Workaround · 2026-09-22: 1Technical Details · 2026-09-22: 109-2209-2309-24
Signal classification3 categories
PoC
250.0%
Exploit
125.0%
Disclosure
125.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-221
Exploit1
2026-09-232
Disclosure1PoC1
2026-09-241
PoC1
Full discourse4 posts
  • Rıdvan Yağlı@ridvanyagli
    Exploit

    🔴 WordPress King Addons for Elementor eklentisi için PoC yayınlandı. King Addons for Elementor ≤ 51.1.36 için yayınlanan Dual Exploit (CVE-2025-6325 + CVE-2025-6327) PoC, kimlik doğrulama gerektirmeden: • CVE-2025-6325 — Privilege Escalation -> Administrator hesabı oluşturma • CVE-2025-6327 — Arbitrary File Upload -> RCE açıkların sömürülebilirliğini test ediyor. Yama: 51.1.37 ve üzeri sürümlere güncelleyin. PoC: https://github.com/JohenLastGen-JLG/CVE-2025-6325_CVE-2025-6327

    Post summary

    The text announces a functional dual exploit PoC for CVE-2025-6325 and CVE-2025-6327 in WordPress King Addons for Elementor, providing a direct link to the exploit code and recommending an update to version 51.1.37 or later.

    0702291.3K
    2.5K followersView on X
  • ExploitGrid@exploitgrid
    Disclosure

    🛡️ #ExploitGrid Daily #Threat Digest Critical Exploits disclosed today: CVE-2025-6325, CVE-2025-6327 CVE-2024-21413 CVE-2026-14894 CVE-2026-90817 CVE-2026-90817 ..🧵👇

    Post summary

    This tweet functions as a threat digest announcing the disclosure of several CVEs categorized as critical exploits. It provides no technical details, PoC links, or specific remediation steps beyond categorizing them.

    1101055
    227 followersView on X
  • ExploitGrid@exploitgrid
    PoC

    [EXPLOIT] CVE-2025-6325, CVE-2025-6327 [CRITICAL/PoC] CVE-2025-6325_CVE-2025-6327 🔗 https://exploitgrid.net/exploits/7373eb37-1368-4af1-921e-612870f549ef

    Post summary

    The tweet announces that proof‑of‑concept exploits exist for the critical CVE‑2025‑6325 and CVE‑2025‑6327 and provides a link to the PoC details.

    1001042
    227 followersView on X
  • ExploitGrid@exploitgrid
    PoC

    💀 CRITICAL Exploits Trending ├ CVE-2025-6325 / CVE-2025-6327 · PoC live ├ CVE-2024-21413 — "MonikerLink" · PoC live └ CVE-2026-14894 · CVE-2026-90817 · PoC live

    Post summary

    The tweet highlights multiple CVEs and notes that proof-of-concept exploits are live for each, without mentioning patches, active exploitation, or exploit tools.

    1000039
    308 followersView on X

Explore more

Back to dashboard