RE
Product
Royal Elementor Addons
58
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 8Medium 46Low 1
Watch
Add Royal Elementor Addons to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-1441 | 8.8 | Feb 19 | Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting Affected: through 1.7.1007 |
| CVE-2022-47175 | 8.8 | Oct 6 | Cross-Site Request Forgery (CSRF) vulnerability in P Royal Royal Elementor Addons and Templates plugin <= 1.3.75 versions Affected: through 1.3.75 |
| CVE-2022-4701 | 8.8 | Jan 10 | The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_required_plugins' AJAX action in versions up to, and including,… Affected: through 1.3.59 |
| CVE-2022-4700 | 8.8 | Jan 10 | The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_required_theme' AJAX action in versions up to, and including,… Affected: through 1.3.59 |
| CVE-2022-4704 | 8.1 | Jan 10 | The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_import_templates_kit' AJAX action in versions up to, and including, 1.3.59 Affected: through 1.3.59 |
| CVE-2022-4703 | 8.1 | Jan 10 | The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_reset_previous_import' AJAX action in versions up to, and including,… Affected: through 1.3.59 |
| CVE-2023-5922 | 7.5 | Jan 16 | The Royal Elementor Addons and Templates WordPress plugin before 1.3.81 does not ensure that users accessing posts via an AJAX action (and REST endpoint, currently disabled in the… Affected: before 1.3.81 |
| CVE-2024-50442 | 7.2 | Oct 28 | WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability Affected: before 1.3.981 |
Showing 8