# Royal Addons for Elementor.

Every CVE that names Royal Addons for Elementor among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Royal Elementor Addons 1.3.81 - 1.7.1069 - Unauthenticated Non-Public Post Content Disclosure via wpr_get_page_content](https://agentprime.io/advisories/CVE-2026-107100.md)
  `CVE-2026-107100` · CVE record: Unknown Royal Addons for Elementor · CVSS 5.3 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Information disclosure
- [Royal Elementor Addons 1.7.1037 - 1.7.1069 - Contributor+ Stored XSS via Google Maps Widget Height Setting](https://agentprime.io/advisories/CVE-2026-107098.md)
  `CVE-2026-107098` · CVE record: Unknown Royal Addons for Elementor · CVSS 6.8 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons 1.3.71 - 1.7.1069 - Unauthenticated Mailchimp Audience Injection via mailchimp_subscribe](https://agentprime.io/advisories/CVE-2026-107097.md)
  `CVE-2026-107097` · CVE record: Unknown Royal Addons for Elementor · CVSS 5.3 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Broken access control
- [Royal Elementor Addons 1.3.68 - 1.7.1069 - Author+ Form Submission Interception via Widget ID Collision](https://agentprime.io/advisories/CVE-2026-106647.md)
  `CVE-2026-106647` · CVE record: Unknown Royal Addons for Elementor · CVSS 3.8 Low · Not analysed yet · Published 28 Oct 2026 · Tags: Broken access control
- [Royal Elementor Addons < 1.7.1067 - Unauthenticated Stored HTML Injection in Form Notification Emails](https://agentprime.io/advisories/CVE-2026-13407.md)
  `CVE-2026-13407` · CVE record: Unknown Royal Addons for Elementor · CVSS 6.1 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-116
- [Royal Elementor Addons < 1.7.1066 - Contributor+ Stored XSS via Image Accordion Widget Effect Settings](https://agentprime.io/advisories/CVE-2026-19226.md)
  `CVE-2026-19226` · CVE record: Unknown Royal Addons for Elementor · CVSS 6.8 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons < 1.7.1066 - Unauthenticated Taxonomy Term Disclosure](https://agentprime.io/advisories/CVE-2026-13406.md)
  `CVE-2026-13406` · CVE record: Unknown Royal Addons for Elementor · CVSS 5.3 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Broken access control
- [Royal Elementor Addons < 1.7.1066 - Unauthenticated Like Count and IP Meta Modification via wpr_likes_init](https://agentprime.io/advisories/CVE-2026-13404.md)
  `CVE-2026-13404` · CVE record: Unknown Royal Addons for Elementor · CVSS 5.3 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Broken access control
- [Royal Elementor Addons < 1.7.1066 - Admin+ Remote Code Execution via Widget Builder](https://agentprime.io/advisories/CVE-2026-13405.md)
  `CVE-2026-13405` · CVE record: Unknown Royal Addons for Elementor · CVSS 6.6 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Code injection
- [Royal Elementor Addons < 1.7.1065 - Contributor+ Stored XSS via Icon Box Widget](https://agentprime.io/advisories/CVE-2026-19217.md)
  `CVE-2026-19217` · CVE record: Unknown Royal Addons for Elementor · CVSS 5.4 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons < 1.7.1063 - Unauthenticated Private Mega Menu Template Disclosure](https://agentprime.io/advisories/CVE-2026-13402.md)
  `CVE-2026-13402` · CVE record: Unknown Royal Addons for Elementor · CVSS 5.3 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Information disclosure
- [Royal Elementor Addons and Templates < 1.7.1037 - Unauthenticated Media File Upload](https://agentprime.io/advisories/CVE-2025-11363.md)
  `CVE-2025-11363` · CVE record: Unknown Royal Addons for Elementor · CVSS 5.3 Medium · Not analysed yet · Published 15 Dec 2025

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=royal-addons-for-elementor>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/royal-addons-for-elementor/>. Everything for agents: <https://agentprime.io/llms.txt>.