Royal Addons For Elementor (Unknown) - vulnerabilities (CVEs)
12 CVEs, 4 in the last 30 days, 1 known versions, newest CVE from 2026-10-28. Vendor: Unknown.
CVEs of Royal Addons For Elementor
- CVE-2026-107100 - CVSS 5.3 (medium), 2026-10-28: The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not verify that a requested post is publicly viewable before returning its content via an…
- CVE-2026-107098 - CVSS 6.8 (medium), 2026-10-28: The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not sanitise and escape one of its map widget's size settings before concatenating it…
- CVE-2026-107097 - CVSS 5.3 (medium), 2026-10-28: The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not perform any authorization check before using the site owner's stored Mailchimp…
- CVE-2026-106647 - CVSS 3.8 (low), 2026-10-28: The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not scope a contact form's email delivery configuration to the form's own document or…
- CVE-2026-13407 - CVSS 6.1 (medium), 2026-09-16: The Royal Elementor Addons WordPress plugin before 1.7.1067 does not properly sanitize and escape values submitted through its form widget before including…
- CVE-2026-19226 - CVSS 6.8 (medium), 2026-08-26: The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not validate some widget settings before outputting them inside an HTML attribute, which…
- CVE-2026-13406 - CVSS 5.3 (medium), 2026-08-26: The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not perform any capability or nonce check before returning taxonomy term data for an…
- CVE-2026-13404 - CVSS 5.3 (medium), 2026-08-26: The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not perform any capability or ownership check (relying only on a publicly-scrapeable…
- CVE-2026-13405 - CVSS 6.6 (medium), 2026-08-20: The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not correctly sanitise custom widget markup before writing it to a file that is later…
- CVE-2026-19217 - CVSS 5.4 (medium), 2026-08-12: The Royal Addons for Elementor WordPress plugin before 1.7.1065 does not validate a widget setting used to build an HTML tag before outputting it, which could…
- CVE-2026-13402 - CVSS 5.3 (medium), 2026-07-17: The Royal Addons for Elementor WordPress plugin before 1.7.1063 does not check the post status of menu items or the templates they reference in one of its…
- CVE-2025-11363 - CVSS 5.3 (medium), 2025-12-15: The Royal Addons for Elementor WordPress plugin before 1.7.1037 does not have proper authorisation, allowing unauthenticated users to upload media files via…
