Login Request a demo
WP
Vendor
wproyal
6 products with CVEs on record
34
CVEs
0
On KEV
4
New 30D
Products
RE
Royal Elementor Addons
WProyal
7.6
6 CVEs0 on KEV4 new
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
8.8
21 CVEs0 on KEV0 new
AS
Ashe
wproyal
4.3
2 CVEs0 on KEV0 new
BA
Bard
wproyal
4.3
2 CVEs0 on KEV0 new
NM
News Magazine X
wproyal
7.5
2 CVEs0 on KEV0 new
RW
Royal WordPress Backup, Restore & Migration Plugin – Backup WordPress Sites Safely
wproyal
6.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-97255
New
RE
Royal Elementor Addons
WProyal
5.3
0%
Oct 26WordPress Royal Elementor Addons plugin <= 1.7.1069 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-97254
New
RE
Royal Elementor Addons
WProyal
6.5
0%
Oct 26WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability
CVE-2026-112865
New
RE
Royal Elementor Addons
WProyal
6.5
0%
Oct 26WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability
CVE-2026-111851
New
RE
Royal Elementor Addons
WProyal
7.6
0%
Oct 22WordPress Royal Elementor Addons plugin <= 1.7.1068 - Arbitrary Code Execution vulnerability
CVE-2026-17585
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.3
1%
Sep 12Royal Addons for Elementor <= 1.7.1066 - Unauthenticated Sensitive Information Exposure via Unfiltered meta_query LIKE Oracle in 'wpr_keyword' Parameter
CVE-2026-17123
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
8.8
1%
Aug 16Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting
CVE-2026-8118
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.5
0%
Jun 19Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1058 - 1.7.1059 - Authenticated (Contributor+) Arbitrary File Read via Data Table Widget CSV File Source
CVE-2026-6504
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.4
0%
May 14Royal Addons for Elementor <= 1.7.1058 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Parameter
CVE-2026-25436
RE
Royal Elementor Addons
WProyal
5.3
0%
May 7WordPress Royal Elementor Addons plugin < 1.7.1053 - Broken Access Control vulnerability
CVE-2026-27421
RE
Royal Elementor Addons
WProyal
6.5
0%
May 7WordPress Royal Elementor Addons plugin < 1.7.1053 - Cross Site Scripting (XSS) vulnerability
CVE-2026-5159
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.4
0%
May 5Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Follow Button Text' Parameter
CVE-2026-4803
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
7.2
0%
May 5Royal Addons for Elementor <= 1.7.1056 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter in wpr_update_form_action_meta
CVE-2026-4024
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.3
1%
May 2Royal Addons for Elementor <= 1.7.1056 - Missing Authorization to Unauthenticated Form Action Meta Modification
CVE-2026-6229
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
7.2
0%
May 2Royal Addons for Elementor <= 1.7.1057 - Authenticated (Contributor+) Server-Side Request Forgery via CSV URL Parameter
CVE-2026-5428
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.4
0%
Apr 24Royal Addons for Elementor <= 1.7.1056 - Authenticated (Author+) Stored Cross-Site Scripting via Image Caption Field
CVE-2026-5162
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.4
0%
Apr 17Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via Instagram Feed Widget
CVE-2026-4305
RW
Royal WordPress Backup, Restore & Migration Plugin – Backup WordPress Sites Safely
wproyal
6.1
0%
Apr 10Royal WordPress Backup & Restore Plugin <= 1.0.16 - Reflected Cross-Site Scripting via 'wpr_pending_template' Parameter
CVE-2026-39627
AS
Ashe
wproyal
4.3
0%
Apr 8WordPress Ashe theme <= 2.266 - Broken Access Control vulnerability
CVE-2026-0664
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.4
0%
Apr 4Royal Elementor Addons <= 1.7.1049 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API Meta Bypass
CVE-2026-24382
NM
News Magazine X
wproyal
7.5
0%
Mar 25WordPress News Magazine X theme <= 1.2.50 - Broken Access Control vulnerability
CVE-2026-2373
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.3
0%
Mar 17Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure
CVE-2025-13067
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
8.8
0%
Mar 11Royal Addons for Elementor <= 1.7.1049 - Authenticated (Author+) Arbitrary File Upload via main.php Upload Bypass
CVE-2025-63018
BA
Bard
wproyal
4.3
0%
Jan 22WordPress Bard theme <= 2.229 - Broken Access Control vulnerability
CVE-2025-5092
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.4
0%
Nov 20Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library
CVE-2025-6251
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.4
0%
Nov 19Royal Elementor Addons and Templates <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-24766
NM
News Magazine X
wproyal
7.5
1%
Aug 14WordPress News Magazine X <= 1.2.35 - Local File Inclusion Vulnerability
CVE-2025-5338
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.4
0%
Jun 26Royal Elementor Addons <= 1.7.1028 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets
CVE-2025-3813
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.4
0%
May 31Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-12120
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.4
0%
May 7Royal Elementor Addons and Templates <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-1456
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.4
0%
Apr 12Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting
CVE-2025-1455
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.4
0%
Apr 12Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-1441
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
8.8
0%
Feb 19Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
CVE-2024-37490
BA
Bard
wproyal
4.3
0%
Jan 2WordPress Bard theme <= 2.210 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-37478
AS
Ashe
wproyal
4.3
0%
Jan 2WordPress Ashe theme <= 2.233 - Cross Site Request Forgery (CSRF) vulnerability