RA
Product
Royal Addons for Elementor – Addons and Templates Kit for Elementor
59
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 9Medium 49Low 0
Watch
Add Royal Addons for Elementor – Addons and Templates Kit for Elementor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-17123 | 8.8 | Aug 16 | Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting Affected: through 1.7.1064 |
| CVE-2025-13067 | 8.8 | Mar 11 | Royal Addons for Elementor <= 1.7.1049 - Authenticated (Author+) Arbitrary File Upload via main.php Upload Bypass Affected: through 1.7.1049 |
| CVE-2025-1441 | 8.8 | Feb 19 | Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting Affected: through 1.7.1007 |
| CVE-2022-4701 | 8.8 | Jan 10 | Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation Affected: through 1.3.59 |
| CVE-2022-4700 | 8.8 | Jan 10 | Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation Affected: through 1.3.59 |
| CVE-2022-4703 | 8.1 | Jan 10 | Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion Affected: through 1.3.59 |
| CVE-2022-4704 | 8.1 | Jan 10 | Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import Affected: through 1.3.59 |
| CVE-2026-4803 | 7.2 | May 5 | Royal Addons for Elementor <= 1.7.1056 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter in wpr_update_form_action_meta Affected: through 1.7.1056 |
| CVE-2026-6229 | 7.2 | May 2 | Royal Addons for Elementor <= 1.7.1057 - Authenticated (Contributor+) Server-Side Request Forgery via CSV URL Parameter Affected: through 1.7.1057 |
Showing 9