RO
Vendor
Royal-elementor-addons
3 products with CVEs on record
60
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-40720
RE
Royal Elementor Addons Pro
Royal Elementor Addons
7.1
0%
Jun 17WordPress Royal Elementor Addons Pro plugin < 1.7.1041 - Cross Site Scripting (XSS) vulnerability
CVE-2025-5338
RE
Royal Elementor Addons
Royal-elementor-addons
5.4
0%
Jun 26Royal Elementor Addons <= 1.7.1028 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets
CVE-2025-3813
RE
Royal Elementor Addons
Royal-elementor-addons
5.4
0%
May 31Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-39361
RE
Royal Elementor Addons
Royal-elementor-addons
5.4
0%
May 7WordPress Royal Elementor Addons plugin <= 1.7.1017 - Cross Site Scripting (XSS) vulnerability
CVE-2024-12120
RE
Royal Elementor Addons
Royal-elementor-addons
5.4
0%
May 7Royal Elementor Addons and Templates <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-26990
RE
Royal Elementor Addons
Royal-elementor-addons
4.9
0%
Apr 15WordPress Royal Elementor Addons plugin <= 1.7.1006 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-1456
RE
Royal Elementor Addons
Royal-elementor-addons
5.4
0%
Apr 12Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting
CVE-2025-1455
RE
Royal Elementor Addons
Royal-elementor-addons
5.4
0%
Apr 12Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-1441
RE
Royal Elementor Addons
Royal-elementor-addons
8.8
0%
Feb 19Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
CVE-2025-0393
RE
Royal Elementor Addons
Royal-elementor-addons
6.1
0%
Jan 14Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
CVE-2024-56062
RE
Royal Elementor Addons
Royal-elementor-addons
5.4
0%
Dec 31WordPress Royal Elementor Addons and Templates plugin <= 1.3.987 - Cross Site Scripting (XSS) vulnerability
CVE-2024-56226
RE
Royal Elementor Addons
Royal-elementor-addons
6.1
0%
Dec 31WordPress Royal Elementor Addons plugin <= 1.7.1001 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-56227
RE
Royal Elementor Addons
Royal-elementor-addons
4.3
0%
Dec 31WordPress Royal Elementor Addons plugin <= 1.7.1001 - Broken Access Control vulnerability
CVE-2024-10798
RE
Royal Elementor Addons
Royal-elementor-addons
4.3
0%
Nov 28Royal Elementor Addons and Templates <= 1.7.1003 - Authenticated (Contributor+) Post Disclosure
CVE-2024-9682
RE
Royal Elementor Addons
Royal-elementor-addons
5.4
0%
Nov 13Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Form Builder Widget
CVE-2024-9668
RE
Royal Elementor Addons
Royal-elementor-addons
5.4
0%
Nov 13Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
CVE-2024-9059
RE
Royal Elementor Addons
Royal-elementor-addons
5.4
0%
Nov 13Royal Elementor Addons and Template <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Google Maps Widget
CVE-2024-50442
RE
Royal Elementor Addons
Royal-elementor-addons
7.2
1%
Oct 28WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability
CVE-2024-7417
RE
Royal Elementor Addons
Royal-elementor-addons
4.3
0%
Oct 17Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure
CVE-2024-8482
RE
Royal Elementor Addons
Royal-elementor-addons
6.4
0%
Oct 8Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget
CVE-2024-44001
RE
Royal Elementor Addons
Royal-elementor-addons
5.4
0%
Sep 17WordPress Royal Elementor Addons and Templates plugin <= 1.3.982 - Cross Site Scripting (XSS) vulnerability
CVE-2024-5818
RE
Royal Elementor Addons
Royal-elementor-addons
5.4
0%
Jul 24Royal Elementor Addons and Templates <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget
CVE-2024-4488
RE
Royal Elementor Addons
Royal-elementor-addons
5.4
0%
Jun 7Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-4489
RE
Royal Elementor Addons
Royal-elementor-addons
5.4
0%
Jun 7Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploads
CVE-2024-4087
RE
Royal Elementor Addons
Royal-elementor-addons
5.4
0%
Jun 1Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting via Back to Top Widget
CVE-2024-4342
RE
Royal Elementor Addons
Royal-elementor-addons
5.4
0%
Jun 1Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-32786
RE
Royal Elementor Addons
Royal-elementor-addons
9.8
0%
May 17WordPress Royal Elementor Addons and Templates plugin <= 1.3.93 - IP Bypass vulnerability
CVE-2024-3887
RE
Royal Elementor Addons
Royal-elementor-addons
5.4
0%
May 16Royal Elementor Addons and Templates <= 1.3.974 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Builder Widget
CVE-2024-1567
RE
Royal Elementor Addons
Royal-elementor-addons
9.8
1%
May 2Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload
CVE-2024-3675
RE
Royal Elementor Addons
Royal-elementor-addons
6.4
1%
May 2Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy List Widget Attributes
CVE-2024-3889
RE
Royal Elementor Addons
Royal-elementor-addons
6.4
0%
Apr 23Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Accordion Title Tags
CVE-2024-2798
RE
Royal Elementor Addons
Royal-elementor-addons
6.4
0%
Apr 23Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
CVE-2024-2799
RE
Royal Elementor Addons
Royal-elementor-addons
6.4
0%
Apr 23Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags
CVE-2024-31236
RE
Royal Elementor Addons
Royal-elementor-addons
5.4
0%
Apr 7WordPress Royal Elementor Addons plugin <= 1.3.93 - Cross Site Scripting (XSS) vulnerability
CVE-2024-1500
RE
Royal Elementor Addons
Royal-elementor-addons
5.4
0%
Mar 7Royal Elementor Addons and Templates <= 1.3.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Logo Widget
CVE-2024-0516
RE
Royal Elementor Addons
Royal-elementor-addons
5.3
0%
Feb 20Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta
CVE-2024-0512
RE
Royal Elementor Addons
Royal-elementor-addons
4.3
0%
Feb 20Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlist
CVE-2024-0514
RE
Royal Elementor Addons
Royal-elementor-addons
4.3
0%
Feb 20Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_compare
CVE-2024-0515
RE
Royal Elementor Addons
Royal-elementor-addons
4.3
0%
Feb 20Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_compare
CVE-2024-0513
RE
Royal Elementor Addons
Royal-elementor-addons
4.3
0%
Feb 20Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_wishlist
CVE-2024-0442
RE
Royal Elementor Addons
Royal-elementor-addons
6.4
0%
Feb 20Royal Elementor Addons and Templates <= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-0511
RE
Royal Elementor Addons
Royal-elementor-addons
4.3
0%
Feb 8Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via wpr_update_form_action_meta
CVE-2024-0835
RE
Royal Elementor Kit
Royal-elementor-addons
4.3
1%
Feb 5Royal Elementor Kit <= 1.0.116 - Missing Authorization to Arbitrary Transient Update
CVE-2023-5922
RE
Royal Elementor Addons
Royal-elementor-addons
7.5
1%
Jan 16Royal Elementor Addons and Templates < 1.3.81 - Unauthenticated Arbitrary Post Read
CVE-2023-5360
RE
Royal Elementor Addons
Royal-elementor-addons
9.8
86%
Oct 31The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary…
CVE-2022-47175
RE
Royal Elementor Addons
Royal-elementor-addons
8.8
0%
Oct 6Cross-Site Request Forgery (CSRF) vulnerability in P Royal Royal Elementor Addons and Templates plugin <= 1.3.75 versions
CVE-2023-3709
RE
Royal Elementor Addons
Royal-elementor-addons
5.3
1%
Jul 18The Royal Elementor Addons plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 1.3.70 due to the plugin adding the API key…
CVE-2022-4711
RE
Royal Elementor Addons
Royal-elementor-addons
4.3
1%
Jan 10The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_save_mega_menu_settings' AJAX action in versions up to, and including,…
CVE-2022-4710
RE
Royal Elementor Addons
Royal-elementor-addons
6.1
1%
Jan 10The Royal Elementor Addons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.3.59, due to due to insufficient input…
CVE-2022-4709
RE
Royal Elementor Addons
Royal-elementor-addons
6.5
1%
Jan 10The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_import_library_template' AJAX action in versions up to, and including,…
CVE-2022-4708
RE
Royal Elementor Addons
Royal-elementor-addons
6.5
1%
Jan 10The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_save_template_conditions' AJAX action in versions up to, and including,…
CVE-2022-4707
RE
Royal Elementor Addons
Royal-elementor-addons
6.5
0%
Jan 10The Royal Elementor Addons plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.59
CVE-2022-4705
RE
Royal Elementor Addons
Royal-elementor-addons
4.3
1%
Jan 10The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_final_settings_setup' AJAX action in versions up to, and including, 1.3.59
CVE-2022-4704
RE
Royal Elementor Addons
Royal-elementor-addons
8.1
1%
Jan 10The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_import_templates_kit' AJAX action in versions up to, and including, 1.3.59
CVE-2022-4703
RE
Royal Elementor Addons
Royal-elementor-addons
8.1
1%
Jan 10The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_reset_previous_import' AJAX action in versions up to, and including,…
CVE-2022-4702
RE
Royal Elementor Addons
Royal-elementor-addons
6.5
1%
Jan 10The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_fix_royal_compatibility' AJAX action in versions up to, and including,…
CVE-2022-4701
RE
Royal Elementor Addons
Royal-elementor-addons
8.8
1%
Jan 10The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_required_plugins' AJAX action in versions up to, and including,…
CVE-2022-4700
RE
Royal Elementor Addons
Royal-elementor-addons
8.8
1%
Jan 10The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_required_theme' AJAX action in versions up to, and including,…
CVE-2022-4103
RE
Royal Elementor Addons
Royal-elementor-addons
4.3
0%
Jan 9The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorisation and CSRF checks when creating a template, and does not ensure that the post created is a…
CVE-2022-4102
RE
Royal Elementor Addons
Royal-elementor-addons
3.1
0%
Jan 9The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorization and CSRF checks when deleting a template and does not ensure that the post to be deleted is a…