Royal Elementor Addons vulnerabilities | LiveThreat CVE Feed

Product

Royal Elementor Addons

by Royal-elementor-addons · last CVE Jun 26, 2025

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities58 In the news0 Timeline

Severity mix

Critical 3High 8Medium 46Low 1

Severity

All severities58 Critical3 High8 Medium46 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Royal Elementor Addons to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-0514	4.3	0%	Feb 29	The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.87 Affected: before 1.3.88
CVE-2024-0513	4.3	0%	Feb 29	The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.87 Affected: before 1.3.88
CVE-2024-0512	4.3	0%	Feb 29	The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.87 Affected: before 1.3.88
CVE-2024-0511	4.3	0%	Feb 8	The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.87 Affected: before 1.3.88
CVE-2022-4711	4.3	1%	Jan 10	The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_save_mega_menu_settings' AJAX action in versions up to, and including,… Affected: before 1.3.60
CVE-2022-4705	4.3	1%	Jan 10	The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_final_settings_setup' AJAX action in versions up to, and including, 1.3.59 Affected: through 1.3.59
CVE-2022-4103	4.3	0%	Jan 9	The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorisation and CSRF checks when creating a template, and does not ensure that the post created is a… Affected: before 1.3.56
CVE-2022-4102	3.1	0%	Jan 9	The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorization and CSRF checks when deleting a template and does not ensure that the post to be deleted is a… Affected: before 1.3.56