{"metadata": {"vulnerability": "CVE-2025-8489", "count": 48, "kinds": {"milestone": 4, "sighting": 33, "kev": 0, "other": 11}}, "data": [{"timestamp": "2025-08-01T21:12:39.827Z", "date_only": false, "value": "2025-08-01T21:12:39.827Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-8489", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": false, "value": "2025-10-30T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2025-8489", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-10-31T06:42:55.486Z", "date_only": false, "value": "2025-10-31T06:42:55.486Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-8489", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-10-31T06:42:55.486Z", "date_only": false, "value": "2025-10-31T06:42:55.486Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2025-8489", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-31T07:15:38Z", "date_only": false, "value": "2025-10-31T07:15:38Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q9WG-XWHC-4J78", "record": "GHSA-Q9WG-XWHC-4J78", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-10-31T07:15:38.693Z", "date_only": false, "value": "2025-10-31T07:15:38.693", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-8489", "record": "FKIE_CVE-2025-8489", "field": "published"}, {"timestamp": "2025-10-31T07:32:09.272Z", "date_only": false, "value": "2025-10-31T07:32:09.272387Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m4hxiin7ds2l", "record": "cve-2025-8489", "field": "creation_timestamp", "uuid": "431fd6fc-83ed-4a01-88a9-cab764186fda", "url": "https://bsky.app/profile/offseq.bsky.social/post/3m4hxiin7ds2l"}, {"timestamp": "2025-10-31T08:42:37Z", "date_only": false, "value": "2025-10-31T08:42:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Darkcrai86/ddd06611a2a6a88b7aa643ba85fbcd64", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "c124103b-5c1e-4770-b9bc-175c156bd0f4", "url": "https://gist.github.com/Darkcrai86/ddd06611a2a6a88b7aa643ba85fbcd64"}, {"timestamp": "2025-10-31T09:30:25Z", "date_only": false, "value": "2025-10-31T09:30:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q9WG-XWHC-4J78", "record": "GHSA-Q9WG-XWHC-4J78", "field": "published"}, {"timestamp": "2025-10-31T09:30:25Z", "date_only": false, "value": "2025-10-31T09:30:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q9WG-XWHC-4J78", "record": "GHSA-Q9WG-XWHC-4J78", "field": "modified"}, {"timestamp": "2025-10-31T09:32:00.025Z", "date_only": false, "value": "2025-10-31T09:32:00.025345Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4i66snvob2b", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "8c436602-0e61-4bb6-8e72-961a47bb392f", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4i66snvob2b"}, {"timestamp": "2025-10-31T14:26:33.193Z", "date_only": false, "value": "2025-10-31T14:26:33.193376Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-8489", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-10-31T14:26:33.193Z", "date_only": false, "value": "2025-10-31T14:26:33.193376Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-8489", "record": "FKIE_CVE-2025-8489", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-11-01T10:08:46.968Z", "date_only": false, "value": "2025-11-01T10:08:46.968929Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m4kqpisz6l2h", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "4226a0e6-b625-4b5c-8ef7-984928d74512", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m4kqpisz6l2h"}, {"timestamp": "2025-11-02T08:54:54.750Z", "date_only": false, "value": "2025-11-02T08:54:54.750091Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3m4n52dg4pp2f", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "dfc0ef98-61a2-41c2-b71f-9a4a69148a85", "url": "https://bsky.app/profile/crowdcyber.bsky.social/post/3m4n52dg4pp2f"}, {"timestamp": "2025-11-04T21:02:35.682Z", "date_only": false, "value": "2025-11-04T21:02:35.682223Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m4tgncgg272j", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "c12da9b7-42b4-437d-bd8f-e35f0d458613", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m4tgncgg272j"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": true, "value": "2025-11-05", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-27246", "record": "CNVD-2025-27246", "field": "submitTime"}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": true, "value": "2025-11-06", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-27246", "record": "CNVD-2025-27246", "field": "openTime"}, {"timestamp": "2025-12-01T22:41:14.352Z", "date_only": false, "value": "2025-12-01T22:41:14.352Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-8489", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-12-01T22:41:14.352Z", "date_only": false, "value": "2025-12-01T22:41:14.352Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-8489", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-12-03T05:25:14.413Z", "date_only": false, "value": "2025-12-03T05:25:14.413497Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m72prxdiks2g", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "477345dd-3c19-49be-8a22-ed3915a4aff5", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m72prxdiks2g"}, {"timestamp": "2025-12-03T13:42:56.229Z", "date_only": false, "value": "2025-12-03T13:42:56.229988Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3m73llvlaoc24", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "db16ca74-aafb-4183-8393-19cf3aab4ad4", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3m73llvlaoc24"}, {"timestamp": "2025-12-03T16:08:00Z", "date_only": false, "value": "2025-12-03T16:08:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/12/wordpress-king-addons-flaw-under-active.html", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "ce047a4c-882b-4ef6-9bae-efe6c87d172a", "url": "https://thehackernews.com/2025/12/wordpress-king-addons-flaw-under-active.html"}, {"timestamp": "2025-12-03T16:20:00.557Z", "date_only": false, "value": "2025-12-03T16:20:00.557691Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/technadu/statuses/115656543342809889", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "3603c0e6-f5f7-4c80-9494-edd30b2c543f", "url": "https://infosec.exchange/users/technadu/statuses/115656543342809889"}, {"timestamp": "2025-12-03T16:23:22.027Z", "date_only": false, "value": "2025-12-03T16:23:22.027502Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technadu.com/post/3m73ukfjatk2u", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "e3465945-f3ef-4f7a-9e13-61ee6f365338", "url": "https://bsky.app/profile/technadu.com/post/3m73ukfjatk2u"}, {"timestamp": "2025-12-03T17:19:06.914Z", "date_only": false, "value": "2025-12-03T17:19:06.914258Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3m73xoh455o2z", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "395ec55c-35a6-4270-88b2-3c3fb8172d06", "url": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3m73xoh455o2z"}, {"timestamp": "2025-12-03T17:50:07Z", "date_only": false, "value": "2025-12-03T17:50:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/wxN7UUV9dq9Jt7_brB7IJzBoHcWBfehnvswutiwbgxU-Pg", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "77d2c9b0-346b-4336-a153-bebf5bc92da3"}, {"timestamp": "2025-12-03T21:31:32Z", "date_only": false, "value": "2025-12-03T21:31:32.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/23546", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "dc875fb5-64f1-4228-8cc8-e22b5973bb4d", "content": "\u200aCritical flaw in WordPress add-on for Elementor exploited in attacks\n\nAttackers are exploiting a critical-severity privilege escalation vulnerability (CVE-2025-8489) in the King Addons for Elementor plugin for WordPress, which lets them obtain\u00a0administrative permissions during the registration process. [...]\n\nhttps://www.bleepingcomputer.com/news/security/critical-flaw-in-wordpress-add-on-for-elementor-exploited-in-attacks/", "url": "https://t.me/BleepingComputer/23546"}, {"timestamp": "2025-12-03T21:31:36.386Z", "date_only": false, "value": "2025-12-03T21:31:36.386844Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3m74frxdqya25", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "aaa28375-cab9-4f99-922c-6fb90162dc33", "url": "https://bsky.app/profile/bleepingcomputer.com/post/3m74frxdqya25"}, {"timestamp": "2025-12-04T02:20:24.986Z", "date_only": false, "value": "2025-12-04T02:20:24.986802Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m74vwenuwq2i", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "110a0507-a35d-4c9d-9cdb-62caf0b4c992", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m74vwenuwq2i"}, {"timestamp": "2025-12-04T05:18:18.368Z", "date_only": false, "value": "2025-12-04T05:18:18.368063Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m757uhw6s32r", "record": "cve-2025-8489", "field": "creation_timestamp", "uuid": "11907cf4-3339-43ab-a494-a9e74d2027de", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m757uhw6s32r"}, {"timestamp": "2025-12-04T06:02:46.747Z", "date_only": false, "value": "2025-12-04T06:02:46.747097Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/115659778612397157", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "6d13b891-ae51-4d16-a4ee-78bfabc8b1c9", "url": "https://infosec.exchange/users/offseq/statuses/115659778612397157"}, {"timestamp": "2025-12-04T10:58:26.029Z", "date_only": false, "value": "2025-12-04T10:58:26.029740Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technijian.bsky.social/post/3m75sumqhu227", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "6a3a5bf5-f6d6-415b-a311-6fa3979d5b9c", "url": "https://bsky.app/profile/technijian.bsky.social/post/3m75sumqhu227"}, {"timestamp": "2025-12-04T14:00:05.748Z", "date_only": false, "value": "2025-12-04T14:00:05.748551Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m764ziss7w2y", "record": "cve-2025-8489", "field": "creation_timestamp", "uuid": "c0ebb2b5-e9bd-447e-bc8d-edeee9ba755d", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m764ziss7w2y"}, {"timestamp": "2025-12-04T15:04:39.186Z", "date_only": false, "value": "2025-12-04T15:04:39.186854Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/yoota.it/post/3m76amwdcv32a", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "4694d71d-beca-4134-a2b8-1e253041e274", "url": "https://bsky.app/profile/yoota.it/post/3m76amwdcv32a"}, {"timestamp": "2025-12-04T17:43:37.810Z", "date_only": false, "value": "2025-12-04T17:43:37.810753Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3m76jj7rwz72b", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "d609a0f4-93c7-4a2c-bf93-2e5f2cda1d06", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3m76jj7rwz72b"}, {"timestamp": "2025-12-04T19:47:35.700Z", "date_only": false, "value": "2025-12-04T19:47:35.700156Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m76qguq2v22t", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "dcc390a7-5e5d-4ede-a8ce-1b657fa9ebf2", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3m76qguq2v22t"}, {"timestamp": "2025-12-04T22:14:25.874Z", "date_only": false, "value": "2025-12-04T22:14:25.874630Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m76ynh4vi22t", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "f1261e5b-1f4c-4dd4-9fa9-03db3ec73e80", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3m76ynh4vi22t"}, {"timestamp": "2025-12-04T23:18:06.996Z", "date_only": false, "value": "2025-12-04T23:18:06.996879Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m7747c6exs2t", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "5899b23f-e441-4971-8c74-6a1336146f5d", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3m7747c6exs2t"}, {"timestamp": "2025-12-05T11:47:17.885Z", "date_only": false, "value": "2025-12-05T11:47:17.885790Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-fa8d137b-e793f24fec0058a8", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "6b5408b2-21e7-493a-a8d4-a87403e09279", "url": "https://poliverso.org/objects/0477a01e-fa8d137b-e793f24fec0058a8"}, {"timestamp": "2025-12-05T11:47:24.095Z", "date_only": false, "value": "2025-12-05T11:47:24.095017Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3m7ag2ms5sil2", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "1c352f1a-003c-4a7c-8523-30040d868c30", "url": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3m7ag2ms5sil2"}, {"timestamp": "2025-12-07T16:04:52.797Z", "date_only": false, "value": "2025-12-07T16:04:52.797230Z", "kind": "sighting", "label": "Seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/115679133066171038", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "c81c4b35-759d-4cac-8039-227e72392632", "url": "https://mstdn.ca/users/rfwaveio/statuses/115679133066171038"}, {"timestamp": "2025-12-11T21:02:32.349Z", "date_only": false, "value": "2025-12-11T21:02:32.349581Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m7qhvbgkqj2b", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "0fbb1f71-b7d5-436c-88b2-90c43318be1f", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m7qhvbgkqj2b"}, {"timestamp": "2026-06-19T12:45:45.115Z", "date_only": false, "value": "2026-06-19T12:45:45.115370Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1a1fa4e2-e08f-426c-93e1-d64d5a0755a8", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "e4f9835c-ac8f-4494-92f1-958c833464d5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1a1fa4e2-e08f-426c-93e1-d64d5a0755a8"}, {"timestamp": "2026-07-26T02:00:08.248Z", "date_only": false, "value": "2026-07-26T02:00:08.248085Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/990", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "4c58603a-cc2a-4d10-b657-43f9d7b14768", "content": "CVE-2025-8489: Path Traversal in ShopLentor WordPress Plugin, 9.8 rating \ud83d\udd25\n\nA recent vulnerability in the ShopLentor (formerly WooLentor) plugin allows unauthenticated attackers to execute any code from PHP files on the server.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/wKuHH\n\ud83d\udc49 Dork: http.body:\"plugins/woolentor-addons\"\n\nRead more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/woolentor-addons/shoplentor-325-unauthenticated-local-php-file-inclusion-via-load-template", "url": "https://t.me/cyberwarehouse/990"}, {"timestamp": "2026-07-27T00:00:32.850Z", "date_only": false, "value": "2026-07-27T00:00:32.850984Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/990", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "cd7fb0cb-6cc1-4082-acd2-ac26b28425f7", "content": "CVE-2025-8489: Path Traversal in ShopLentor WordPress Plugin, 9.8 rating \ud83d\udd25\n\nA recent vulnerability in the ShopLentor (formerly WooLentor) plugin allows unauthenticated attackers to execute any code from PHP files on the server.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/wKuHH\n\ud83d\udc49 Dork: http.body:\"plugins/woolentor-addons\"\n\nRead more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/woolentor-addons/shoplentor-325-unauthenticated-local-php-file-inclusion-via-load-template", "url": "https://t.me/cyberwarehouse/990"}, {"timestamp": "2026-09-08T06:50:21.756Z", "date_only": false, "value": "2026-09-08T06:50:21.756623Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_king_addons_privilege_escalation.rb", "record": "CVE-2025-8489", "field": "creation_timestamp", "uuid": "77bc5ac6-79d2-4214-8ca9-e4e40e76f48d", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"Peter Thaleikis\", \"Valentin Lobstein \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated privilege escalation vulnerability in the WordPress\\n          King Addons for Elementor plugin (versions 24.12.92 to 51.1.14). The vulnerability exists\\n          in the handle_register_ajax() function which allows unauthenticated attackers to specify\\n          the user_role parameter during registration, enabling them to create administrator accounts.\\n\\n          This exploit requires a WordPress page containing the King Addons \\\"Login Register Form\\\"\\n          Elementor widget, which exposes the required nonce token in the page's JavaScript.\\n          The NONCE_PAGE option must be set to the path of such a page.\\n\\n          Once an administrator account is created, the module uploads and executes a malicious\\n          plugin to achieve remote code execution (RCE).\", \"disclosure_date\": \"2025-10-30\", \"fullname\": \"exploit/multi/http/wp_king_addons_privilege_escalation\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"WordPress King Addons for Elementor Unauthenticated Privilege Escalation to RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/wp_king_addons_privilege_escalation.rb\", \"platform\": \"Linux,PHP,Unix,Windows\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/wp_king_addons_privilege_escalation\", \"references\": [\"CVE-2025-8489\", \"URL-https://www.wordfence.com/blog/2025/12/attackers-actively-exploiting-critical-vulnerability-in-king-addons-for-elementor-plugin/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP In-Memory\", \"Unix/Linux Command Shell\", \"Windows Command Shell\"], \"type\": \"exploit\"}", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_king_addons_privilege_escalation.rb"}, {"timestamp": "2026-10-07T21:10:00.200Z", "date_only": false, "value": "2026-10-07T21:10:00.200", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-8489", "record": "FKIE_CVE-2025-8489", "field": "lastModified"}]}