Advisories · Technology

WProyal Royal Elementor Addons.

Every CVE that names WProyal Royal Elementor Addons among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-97255 CVE record

CVSS 5.3 Medium

WordPress Royal Elementor Addons plugin <= 1.7.1069 - Insecure Direct Object References (IDOR) vulnerability
- WProyal Royal Elementor Addons
- Broken access control
Not analysed yet 26 Oct 2026
CVE-2026-97254 CVE record

CVSS 6.5 Medium

WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability
- WProyal Royal Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 26 Oct 2026
CVE-2026-112865 CVE record

CVSS 6.5 Medium

WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability
- WProyal Royal Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 26 Oct 2026
CVE-2026-111851 CVE record

CVSS 7.6 High

WordPress Royal Elementor Addons plugin <= 1.7.1068 - Arbitrary Code Execution vulnerability
- WProyal Royal Elementor Addons
- Code injection
Not analysed yet 22 Oct 2026
CVE-2026-25436 CVE record

CVSS 5.3 Medium

WordPress Royal Elementor Addons plugin < 1.7.1053 - Broken Access Control vulnerability
- WProyal Royal Elementor Addons
- Broken access control
Not analysed yet 7 May 2026
CVE-2026-27421 CVE record

CVSS 6.5 Medium

WordPress Royal Elementor Addons plugin < 1.7.1053 - Cross Site Scripting (XSS) vulnerability
- WProyal Royal Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 7 May 2026