RO
Vendor
Royal-elementor-addons
60
CVEs
0
On KEV
0
New 30D
Products
RE9.8
Royal Elementor Addons
Royal-elementor-addons
58 CVEs0 on KEV0 new
RE7.1
Royal Elementor Addons Pro
Royal Elementor Addons
1 CVEs0 on KEV0 new
RE4.3
Royal Elementor Kit
Royal-elementor-addons
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-40720 | RE Royal Elementor Addons Pro Royal Elementor Addons | 7.1 | Jun 17 | WordPress Royal Elementor Addons Pro plugin < 1.7.1041 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-5338 | RE Royal Elementor Addons Royal-elementor-addons | 5.4 | Jun 26 | Royal Elementor Addons <= 1.7.1028 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets |
| CVE-2025-3813 | RE Royal Elementor Addons Royal-elementor-addons | 5.4 | May 31 | Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-39361 | RE Royal Elementor Addons Royal-elementor-addons | 5.4 | May 7 | WordPress Royal Elementor Addons plugin <= 1.7.1017 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-12120 | RE Royal Elementor Addons Royal-elementor-addons | 5.4 | May 7 | Royal Elementor Addons and Templates <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-26990 | RE Royal Elementor Addons Royal-elementor-addons | 4.9 | Apr 15 | WordPress Royal Elementor Addons plugin <= 1.7.1006 - Server Side Request Forgery (SSRF) vulnerability |
| CVE-2025-1456 | RE Royal Elementor Addons Royal-elementor-addons | 5.4 | Apr 12 | Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-1455 | RE Royal Elementor Addons Royal-elementor-addons | 5.4 | Apr 12 | Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-1441 | RE Royal Elementor Addons Royal-elementor-addons | 8.8 | Feb 19 | Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting |
| CVE-2025-0393 | RE Royal Elementor Addons Royal-elementor-addons | 6.1 | Jan 14 | Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scripting |
| CVE-2024-56062 | RE Royal Elementor Addons Royal-elementor-addons | 5.4 | Dec 31 | WordPress Royal Elementor Addons and Templates plugin <= 1.3.987 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-56226 | RE Royal Elementor Addons Royal-elementor-addons | 6.1 | Dec 31 | WordPress Royal Elementor Addons plugin <= 1.7.1001 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-56227 | RE Royal Elementor Addons Royal-elementor-addons | 4.3 | Dec 31 | WordPress Royal Elementor Addons plugin <= 1.7.1001 - Broken Access Control vulnerability |
| CVE-2024-10798 | RE Royal Elementor Addons Royal-elementor-addons | 4.3 | Nov 28 | Royal Elementor Addons and Templates <= 1.7.1003 - Authenticated (Contributor+) Post Disclosure |
| CVE-2024-9682 | RE Royal Elementor Addons Royal-elementor-addons | 5.4 | Nov 13 | Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Form Builder Widget |
| CVE-2024-9668 | RE Royal Elementor Addons Royal-elementor-addons | 5.4 | Nov 13 | Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget |
| CVE-2024-9059 | RE Royal Elementor Addons Royal-elementor-addons | 5.4 | Nov 13 | Royal Elementor Addons and Template <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Google Maps Widget |
| CVE-2024-50442 | RE Royal Elementor Addons Royal-elementor-addons | 7.2 | Oct 28 | WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability |
| CVE-2024-7417 | RE Royal Elementor Addons Royal-elementor-addons | 4.3 | Oct 17 | Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure |
| CVE-2024-8482 | RE Royal Elementor Addons Royal-elementor-addons | 6.4 | Oct 8 | Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget |
| CVE-2024-44001 | RE Royal Elementor Addons Royal-elementor-addons | 5.4 | Sep 17 | WordPress Royal Elementor Addons and Templates plugin <= 1.3.982 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-5818 | RE Royal Elementor Addons Royal-elementor-addons | 5.4 | Jul 24 | Royal Elementor Addons and Templates <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget |
| CVE-2024-4488 | RE Royal Elementor Addons Royal-elementor-addons | 5.4 | Jun 7 | Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-4489 | RE Royal Elementor Addons Royal-elementor-addons | 5.4 | Jun 7 | Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploads |
| CVE-2024-4087 | RE Royal Elementor Addons Royal-elementor-addons | 5.4 | Jun 1 | Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting via Back to Top Widget |
| CVE-2024-4342 | RE Royal Elementor Addons Royal-elementor-addons | 5.4 | Jun 1 | Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-32786 | RE Royal Elementor Addons Royal-elementor-addons | 9.8 | May 17 | WordPress Royal Elementor Addons and Templates plugin <= 1.3.93 - IP Bypass vulnerability |
| CVE-2024-3887 | RE Royal Elementor Addons Royal-elementor-addons | 5.4 | May 16 | Royal Elementor Addons and Templates <= 1.3.974 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Builder Widget |
| CVE-2024-1567 | RE Royal Elementor Addons Royal-elementor-addons | 9.8 | May 2 | Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload |
| CVE-2024-3675 | RE Royal Elementor Addons Royal-elementor-addons | 6.4 | May 2 | Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy List Widget Attributes |
| CVE-2024-3889 | RE Royal Elementor Addons Royal-elementor-addons | 6.4 | Apr 23 | Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Accordion Title Tags |
| CVE-2024-2798 | RE Royal Elementor Addons Royal-elementor-addons | 6.4 | Apr 23 | Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting |
| CVE-2024-2799 | RE Royal Elementor Addons Royal-elementor-addons | 6.4 | Apr 23 | Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags |
| CVE-2024-31236 | RE Royal Elementor Addons Royal-elementor-addons | 5.4 | Apr 7 | WordPress Royal Elementor Addons plugin <= 1.3.93 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-1500 | RE Royal Elementor Addons Royal-elementor-addons | 5.4 | Mar 7 | Royal Elementor Addons and Templates <= 1.3.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Logo Widget |
| CVE-2024-0516 | RE Royal Elementor Addons Royal-elementor-addons | 5.3 | Feb 20 | Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta |
| CVE-2024-0512 | RE Royal Elementor Addons Royal-elementor-addons | 4.3 | Feb 20 | Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlist |
| CVE-2024-0514 | RE Royal Elementor Addons Royal-elementor-addons | 4.3 | Feb 20 | Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_compare |
| CVE-2024-0515 | RE Royal Elementor Addons Royal-elementor-addons | 4.3 | Feb 20 | Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_compare |
| CVE-2024-0513 | RE Royal Elementor Addons Royal-elementor-addons | 4.3 | Feb 20 | Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_wishlist |
| CVE-2024-0442 | RE Royal Elementor Addons Royal-elementor-addons | 6.4 | Feb 20 | Royal Elementor Addons and Templates <= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-0511 | RE Royal Elementor Addons Royal-elementor-addons | 4.3 | Feb 8 | Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via wpr_update_form_action_meta |
| CVE-2024-0835 | RE Royal Elementor Kit Royal-elementor-addons | 4.3 | Feb 5 | Royal Elementor Kit <= 1.0.116 - Missing Authorization to Arbitrary Transient Update |
| CVE-2023-5922 | RE Royal Elementor Addons Royal-elementor-addons | 7.5 | Jan 16 | Royal Elementor Addons and Templates < 1.3.81 - Unauthenticated Arbitrary Post Read |
| CVE-2023-5360 | RE Royal Elementor Addons Royal-elementor-addons | 9.8 | Oct 31 | The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary… |
| CVE-2022-47175 | RE Royal Elementor Addons Royal-elementor-addons | 8.8 | Oct 6 | Cross-Site Request Forgery (CSRF) vulnerability in P Royal Royal Elementor Addons and Templates plugin <= 1.3.75 versions |
| CVE-2023-3709 | RE Royal Elementor Addons Royal-elementor-addons | 5.3 | Jul 18 | The Royal Elementor Addons plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 1.3.70 due to the plugin adding the API key… |
| CVE-2022-4711 | RE Royal Elementor Addons Royal-elementor-addons | 4.3 | Jan 10 | The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_save_mega_menu_settings' AJAX action in versions up to, and including,… |
| CVE-2022-4710 | RE Royal Elementor Addons Royal-elementor-addons | 6.1 | Jan 10 | The Royal Elementor Addons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.3.59, due to due to insufficient input… |
| CVE-2022-4709 | RE Royal Elementor Addons Royal-elementor-addons | 6.5 | Jan 10 | The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_import_library_template' AJAX action in versions up to, and including,… |
| CVE-2022-4708 | RE Royal Elementor Addons Royal-elementor-addons | 6.5 | Jan 10 | The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_save_template_conditions' AJAX action in versions up to, and including,… |
| CVE-2022-4707 | RE Royal Elementor Addons Royal-elementor-addons | 6.5 | Jan 10 | The Royal Elementor Addons plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.59 |
| CVE-2022-4705 | RE Royal Elementor Addons Royal-elementor-addons | 4.3 | Jan 10 | The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_final_settings_setup' AJAX action in versions up to, and including, 1.3.59 |
| CVE-2022-4704 | RE Royal Elementor Addons Royal-elementor-addons | 8.1 | Jan 10 | The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_import_templates_kit' AJAX action in versions up to, and including, 1.3.59 |
| CVE-2022-4703 | RE Royal Elementor Addons Royal-elementor-addons | 8.1 | Jan 10 | The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_reset_previous_import' AJAX action in versions up to, and including,… |
| CVE-2022-4702 | RE Royal Elementor Addons Royal-elementor-addons | 6.5 | Jan 10 | The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_fix_royal_compatibility' AJAX action in versions up to, and including,… |
| CVE-2022-4701 | RE Royal Elementor Addons Royal-elementor-addons | 8.8 | Jan 10 | The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_required_plugins' AJAX action in versions up to, and including,… |
| CVE-2022-4700 | RE Royal Elementor Addons Royal-elementor-addons | 8.8 | Jan 10 | The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_required_theme' AJAX action in versions up to, and including,… |
| CVE-2022-4103 | RE Royal Elementor Addons Royal-elementor-addons | 4.3 | Jan 9 | The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorisation and CSRF checks when creating a template, and does not ensure that the post created is a… |
| CVE-2022-4102 | RE Royal Elementor Addons Royal-elementor-addons | 3.1 | Jan 9 | The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorization and CSRF checks when deleting a template and does not ensure that the post to be deleted is a… |
