# wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor.

Every CVE that names wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Royal Addons for Elementor <= 1.7.1066 - Unauthenticated Sensitive Information Exposure via Unfiltered meta_query LIKE Oracle in 'wpr_keyword' Parameter](https://agentprime.io/advisories/CVE-2026-17585.md)
  `CVE-2026-17585` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 5.3 Medium · Not analysed yet · Published 12 Sept 2026 · Tags: Information disclosure
- [Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting](https://agentprime.io/advisories/CVE-2026-17123.md)
  `CVE-2026-17123` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 8.8 High · Not analysed yet · Published 16 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1058 - 1.7.1059 - Authenticated (Contributor+) Arbitrary File Read via Data Table Widget CSV File Source](https://agentprime.io/advisories/CVE-2026-8118.md)
  `CVE-2026-8118` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.5 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Path traversal
- [Royal Addons for Elementor <= 1.7.1058 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Parameter](https://agentprime.io/advisories/CVE-2026-6504.md)
  `CVE-2026-6504` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 14 May 2026 · Tags: Cross-site scripting (XSS)
- [Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Follow Button Text' Parameter](https://agentprime.io/advisories/CVE-2026-5159.md)
  `CVE-2026-5159` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 5 May 2026 · Tags: Cross-site scripting (XSS)
- [Royal Addons for Elementor <= 1.7.1056 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter in wpr_update_form_action_meta](https://agentprime.io/advisories/CVE-2026-4803.md)
  `CVE-2026-4803` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 7.2 High · Not analysed yet · Published 5 May 2026 · Tags: Cross-site scripting (XSS)
- [Royal Addons for Elementor <= 1.7.1056 - Missing Authorization to Unauthenticated Form Action Meta Modification](https://agentprime.io/advisories/CVE-2026-4024.md)
  `CVE-2026-4024` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 5.3 Medium · Not analysed yet · Published 2 May 2026 · Tags: Broken access control
- [Royal Addons for Elementor <= 1.7.1057 - Authenticated (Contributor+) Server-Side Request Forgery via CSV URL Parameter](https://agentprime.io/advisories/CVE-2026-6229.md)
  `CVE-2026-6229` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 7.2 High · Not analysed yet · Published 2 May 2026 · Tags: Server-side request forgery (SSRF)
- [Royal Addons for Elementor <= 1.7.1056 - Authenticated (Author+) Stored Cross-Site Scripting via Image Caption Field](https://agentprime.io/advisories/CVE-2026-5428.md)
  `CVE-2026-5428` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 24 Apr 2026 · Tags: Cross-site scripting (XSS)
- [Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via Instagram Feed Widget](https://agentprime.io/advisories/CVE-2026-5162.md)
  `CVE-2026-5162` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons <= 1.7.1049 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API Meta Bypass](https://agentprime.io/advisories/CVE-2026-0664.md)
  `CVE-2026-0664` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 4 Apr 2026 · Tags: Cross-site scripting (XSS)
- [Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure](https://agentprime.io/advisories/CVE-2026-2373.md)
  `CVE-2026-2373` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 5.3 Medium · Not analysed yet · Published 17 Mar 2026 · Tags: Broken access control
- [Royal Addons for Elementor <= 1.7.1049 - Authenticated (Author+) Arbitrary File Upload via main.php Upload Bypass](https://agentprime.io/advisories/CVE-2025-13067.md)
  `CVE-2025-13067` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 8.8 High · Not analysed yet · Published 11 Mar 2026 · Tags: Unrestricted file upload
- [Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library](https://agentprime.io/advisories/CVE-2025-5092.md)
  `CVE-2025-5092` · CVE record: lightgalleryteam LightGallery WP and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 20 Nov 2025 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-6251.md)
  `CVE-2025-6251` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 19 Nov 2025 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons <= 1.7.1028 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets](https://agentprime.io/advisories/CVE-2025-5338.md)
  `CVE-2025-5338` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 26 Jun 2025 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-3813.md)
  `CVE-2025-3813` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 31 May 2025 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-12120.md)
  `CVE-2024-12120` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 5.4 Medium · Not analysed yet · Published 7 May 2025 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-1456.md)
  `CVE-2025-1456` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 12 Apr 2025 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-1455.md)
  `CVE-2025-1455` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 12 Apr 2025 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-1441.md)
  `CVE-2025-1441` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.1 Medium · Not analysed yet · Published 19 Feb 2025 · Tags: Cross-site request forgery (CSRF)
- [Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-0393.md)
  `CVE-2025-0393` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.1 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Cross-site request forgery (CSRF)
- [Royal Elementor Addons and Templates <= 1.7.1003 - Authenticated (Contributor+) Post Disclosure](https://agentprime.io/advisories/CVE-2024-10798.md)
  `CVE-2024-10798` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 4.3 Medium · Not analysed yet · Published 28 Nov 2024 · Tags: Broken access control
- [Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Form Builder Widget](https://agentprime.io/advisories/CVE-2024-9682.md)
  `CVE-2024-9682` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget](https://agentprime.io/advisories/CVE-2024-9668.md)
  `CVE-2024-9668` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Template <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Google Maps Widget](https://agentprime.io/advisories/CVE-2024-9059.md)
  `CVE-2024-9059` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure](https://agentprime.io/advisories/CVE-2024-7417.md)
  `CVE-2024-7417` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 4.3 Medium · Not analysed yet · Published 17 Oct 2024 · Tags: Information disclosure
- [Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget](https://agentprime.io/advisories/CVE-2024-8482.md)
  `CVE-2024-8482` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget](https://agentprime.io/advisories/CVE-2024-5818.md)
  `CVE-2024-5818` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 24 Jul 2024 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-4488.md)
  `CVE-2024-4488` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 7 Jun 2024 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploads](https://agentprime.io/advisories/CVE-2024-4489.md)
  `CVE-2024-4489` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 7 Jun 2024 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting via Back to Top Widget](https://agentprime.io/advisories/CVE-2024-4087.md)
  `CVE-2024-4087` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 1 Jun 2024 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-4342.md)
  `CVE-2024-4342` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 1 Jun 2024 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.3.974 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Builder Widget](https://agentprime.io/advisories/CVE-2024-3887.md)
  `CVE-2024-3887` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 5.4 Medium · Not analysed yet · Published 16 May 2024 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload](https://agentprime.io/advisories/CVE-2024-1567.md)
  `CVE-2024-1567` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 8.2 High · Not analysed yet · Published 2 May 2024 · Tags: Unrestricted file upload
- [Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy List Widget Attributes](https://agentprime.io/advisories/CVE-2024-3675.md)
  `CVE-2024-3675` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 2 May 2024 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Accordion Title Tags](https://agentprime.io/advisories/CVE-2024-3889.md)
  `CVE-2024-3889` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 23 Apr 2024 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-2798.md)
  `CVE-2024-2798` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 23 Apr 2024 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags](https://agentprime.io/advisories/CVE-2024-2799.md)
  `CVE-2024-2799` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 23 Apr 2024 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.3.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Logo Widget](https://agentprime.io/advisories/CVE-2024-1500.md)
  `CVE-2024-1500` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 5.4 Medium · Not analysed yet · Published 7 Mar 2024 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta](https://agentprime.io/advisories/CVE-2024-0516.md)
  `CVE-2024-0516` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 5.3 Medium · Not analysed yet · Published 20 Feb 2024 · Tags: Cross-site request forgery (CSRF)
- [Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlist](https://agentprime.io/advisories/CVE-2024-0512.md)
  `CVE-2024-0512` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 4.3 Medium · Not analysed yet · Published 20 Feb 2024 · Tags: Cross-site request forgery (CSRF)
- [Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_compare](https://agentprime.io/advisories/CVE-2024-0514.md)
  `CVE-2024-0514` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 4.3 Medium · Not analysed yet · Published 20 Feb 2024 · Tags: Cross-site request forgery (CSRF)
- [Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_compare](https://agentprime.io/advisories/CVE-2024-0515.md)
  `CVE-2024-0515` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 4.3 Medium · Not analysed yet · Published 20 Feb 2024 · Tags: Cross-site request forgery (CSRF)
- [Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_wishlist](https://agentprime.io/advisories/CVE-2024-0513.md)
  `CVE-2024-0513` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 4.3 Medium · Not analysed yet · Published 20 Feb 2024 · Tags: Cross-site request forgery (CSRF)
- [Royal Elementor Addons and Templates <= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-0442.md)
  `CVE-2024-0442` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 20 Feb 2024 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via wpr_update_form_action_meta](https://agentprime.io/advisories/CVE-2024-0511.md)
  `CVE-2024-0511` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 4.3 Medium · Not analysed yet · Published 8 Feb 2024 · Tags: Cross-site request forgery (CSRF)
- [Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure](https://agentprime.io/advisories/CVE-2023-3709.md)
  `CVE-2023-3709` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 5.3 Medium · Not analysed yet · Published 18 Jul 2023 · Tags: Information disclosure
- [Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creation](https://agentprime.io/advisories/CVE-2022-4707.md)
  `CVE-2022-4707` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 4.3 Medium · Not analysed yet · Published 10 Jan 2023 · Tags: Cross-site request forgery (CSRF)
- [Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation](https://agentprime.io/advisories/CVE-2022-4701.md)
  `CVE-2022-4701` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 4.3 Medium · Not analysed yet · Published 10 Jan 2023 · Tags: Broken access control
- [Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion](https://agentprime.io/advisories/CVE-2022-4703.md)
  `CVE-2022-4703` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 4.3 Medium · Not analysed yet · Published 10 Jan 2023 · Tags: Broken access control
- [Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Activation](https://agentprime.io/advisories/CVE-2022-4705.md)
  `CVE-2022-4705` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 4.3 Medium · Not analysed yet · Published 10 Jan 2023 · Tags: Broken access control
- [Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import](https://agentprime.io/advisories/CVE-2022-4704.md)
  `CVE-2022-4704` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 5.4 Medium · Not analysed yet · Published 10 Jan 2023 · Tags: Broken access control
- [Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scripting](https://agentprime.io/advisories/CVE-2022-4710.md)
  `CVE-2022-4710` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 6.1 Medium · Not analysed yet · Published 10 Jan 2023 · Tags: Cross-site scripting (XSS)
- [Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modification](https://agentprime.io/advisories/CVE-2022-4708.md)
  `CVE-2022-4708` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 4.3 Medium · Not analysed yet · Published 10 Jan 2023 · Tags: Broken access control
- [Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings Update](https://agentprime.io/advisories/CVE-2022-4711.md)
  `CVE-2022-4711` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 4.3 Medium · Not analysed yet · Published 10 Jan 2023 · Tags: Broken access control
- [Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation](https://agentprime.io/advisories/CVE-2022-4702.md)
  `CVE-2022-4702` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 5.4 Medium · Not analysed yet · Published 10 Jan 2023 · Tags: Broken access control
- [Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation](https://agentprime.io/advisories/CVE-2022-4700.md)
  `CVE-2022-4700` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 5.4 Medium · Not analysed yet · Published 10 Jan 2023 · Tags: Broken access control
- [Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Kit Import](https://agentprime.io/advisories/CVE-2022-4709.md)
  `CVE-2022-4709` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 4.3 Medium · Not analysed yet · Published 10 Jan 2023 · Tags: Broken access control

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=wproyal-royal-addons-for-elementor-addons-and-templates-kit-for-elementor>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/wproyal-royal-addons-for-elementor-addons-and-templates-kit-for-elementor/>. Everything for agents: <https://agentprime.io/llms.txt>.