Advisories · Technology

WP Royal Royal Elementor Addons.

Every CVE that names WP Royal Royal Elementor Addons among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-40763 CVE record

CVSS 5.3 Medium

WordPress Royal Elementor Addons plugin <= 1.7.1056 - Broken Access Control vulnerability
- WP Royal Royal Elementor Addons
- Broken access control
Not analysed yet 15 Apr 2026
CVE-2026-28135 CVE record

CVSS 8.2 High

WordPress Royal Elementor Addons plugin <= 1.7.1052 - Other vulnerability Type vulnerability
- WP Royal Royal Elementor Addons
- CWE-829
Not analysed yet 5 Mar 2026
CVE-2025-39361 CVE record

CVSS 6.5 Medium

WordPress Royal Elementor Addons plugin <= 1.7.1017 - Cross Site Scripting (XSS) vulnerability
- WP Royal Royal Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 7 May 2025
CVE-2025-39543 CVE record

CVSS 6.5 Medium

WordPress Royal Elementor Addons plugin <= 1.3.977 - Cross Site Scripting (XSS) vulnerability
- WP Royal Royal Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 16 Apr 2025
CVE-2025-26990 CVE record

CVSS 4.4 Medium

WordPress Royal Elementor Addons plugin <= 1.7.1006 - Server Side Request Forgery (SSRF) vulnerability
- WP Royal Royal Elementor Addons
- Server-side request forgery (SSRF)
Not analysed yet 15 Apr 2025
CVE-2024-56062 CVE record

CVSS 6.5 Medium

WordPress Royal Elementor Addons and Templates plugin <= 1.3.987 - Cross Site Scripting (XSS) vulnerability
- WP Royal Royal Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 31 Dec 2024
CVE-2024-56226 CVE record

CVSS 7.1 High

WordPress Royal Elementor Addons plugin <= 1.7.1001 - Reflected Cross Site Scripting (XSS) vulnerability
- WP Royal Royal Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 31 Dec 2024
CVE-2024-56227 CVE record

CVSS 4.3 Medium

WordPress Royal Elementor Addons plugin <= 1.7.1001 - Broken Access Control vulnerability
- WP Royal Royal Elementor Addons
- Broken access control
Not analysed yet 31 Dec 2024
CVE-2024-50442 CVE record

CVSS 6.5 Medium

WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability
- WP Royal Royal Elementor Addons
- XML external entities (XXE)
Not analysed yet 28 Oct 2024
CVE-2024-44001 CVE record

CVSS 6.5 Medium

WordPress Royal Elementor Addons and Templates plugin <= 1.3.982 - Cross Site Scripting (XSS) vulnerability
- WP Royal Royal Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 17 Sept 2024
CVE-2024-32786 CVE record

CVSS 5.3 Medium

WordPress Royal Elementor Addons and Templates plugin <= 1.3.93 - IP Bypass vulnerability
- WP Royal Royal Elementor Addons
- Authentication bypass
Not analysed yet 17 May 2024
CVE-2024-31236 CVE record

CVSS 6.5 Medium

WordPress Royal Elementor Addons plugin <= 1.3.93 - Cross Site Scripting (XSS) vulnerability
- WP Royal Royal Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 7 Apr 2024