RA
Product
Royal Addons for Elementor
11
CVEs
0
On KEV
6.8
Max CVSS
4
New 30D
Severity mix
Critical 0High 0Medium 7Low 0
Watch
Add Royal Addons for Elementor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-19226 | 6.8 | Aug 26 | Royal Elementor Addons < 1.7.1066 - Contributor+ Stored XSS via Image Accordion Widget Effect Settings Affected: before 1.7.1066 |
| CVE-2026-13405 | 6.6 | Aug 20 | Royal Elementor Addons < 1.7.1066 - Admin+ Remote Code Execution via Widget Builder Affected: before 1.7.1066 |
| CVE-2026-13407 | 5.4 | Sep 16 | Royal Elementor Addons < 1.7.1067 - Unauthenticated Stored HTML Injection in Form Notification Emails Affected: before 1.7.1067 |
| CVE-2026-19217 | 5.4 | Aug 12 | Royal Elementor Addons < 1.7.1065 - Contributor+ Stored XSS via Icon Box Widget Affected: before 1.7.1065 |
| CVE-2026-13406 | 5.3 | Aug 26 | Royal Elementor Addons < 1.7.1066 - Unauthenticated Taxonomy Term Disclosure Affected: before 1.7.1066 |
| CVE-2026-13404 | 5.3 | Aug 26 | Royal Elementor Addons < 1.7.1066 - Unauthenticated Like Count and IP Meta Modification via wpr_likes_init Affected: before 1.7.1066 |
| CVE-2026-13402 | 5.3 | Jul 17 | Royal Elementor Addons < 1.7.1063 - Unauthenticated Private Mega Menu Template Disclosure Affected: before 1.7.1063 |
| CVE-2026-107100 New | – | Oct 28 | Royal Elementor Addons 1.3.81 - 1.7.1069 - Unauthenticated Non-Public Post Content Disclosure via wpr_get_page_content Affected: 1.3.81 before 1.7.1070 |
| CVE-2026-107098 New | – | Oct 28 | Royal Elementor Addons 1.7.1037 - 1.7.1069 - Contributor+ Stored XSS via Google Maps Widget Height Setting Affected: 1.7.1037 before 1.7.1070 |
| CVE-2026-107097 New | – | Oct 28 | Royal Elementor Addons 1.3.71 - 1.7.1069 - Unauthenticated Mailchimp Audience Injection via mailchimp_subscribe Affected: 1.3.71 before 1.7.1070 |
| CVE-2026-106647 New | – | Oct 28 | Royal Elementor Addons 1.3.68 - 1.7.1069 - Author+ Form Submission Interception via Widget ID Collision Affected: 1.3.68 before 1.7.1070 |
Showing 11