wproyal vulnerabilities

CVEs per yearBy the year they were published

1. 202312
2. 202430
3. 202512
4. 202623

Newest CVEs

• CVE-2026-97255

  WordPress Royal Elementor Addons plugin <= 1.7.1069 - Insecure Direct Object References (IDOR) vulnerability

  WProyal · Royal Elementor Addons

  Medium5.3
• CVE-2026-97254

  WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability

  WProyal · Royal Elementor Addons

  Medium6.5
• CVE-2026-112865

  WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability

  WProyal · Royal Elementor Addons

  Medium6.5
• CVE-2026-111851

  WordPress Royal Elementor Addons plugin <= 1.7.1068 - Arbitrary Code Execution vulnerability

  WProyal · Royal Elementor Addons

  High7.6
• CVE-2026-17585

  Royal Addons for Elementor <= 1.7.1066 - Unauthenticated Sensitive Information Exposure via Unfiltered meta_query LIKE Oracle in 'wpr_keyword' Parameter

  wproyal · Royal Addons for Elementor – Addons and Templates Kit for Elementor

  Medium5.3
• CVE-2026-17123

  Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting

  wproyal · Royal Addons for Elementor – Addons and Templates Kit for Elementor

  High8.8
• CVE-2026-8118

  Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1058 - 1.7.1059 - Authenticated (Contributor+) Arbitrary File Read via Data Table Widget CSV File Source

  wproyal · Royal Addons for Elementor – Addons and Templates Kit for Elementor

  Medium6.5
• CVE-2026-6504

  Royal Addons for Elementor <= 1.7.1058 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Parameter

  wproyal · Royal Addons for Elementor – Addons and Templates Kit for Elementor

  Medium6.4
• CVE-2026-25436

  WordPress Royal Elementor Addons plugin < 1.7.1053 - Broken Access Control vulnerability

  WProyal · Royal Elementor Addons

  Medium5.3
• CVE-2026-27421

  WordPress Royal Elementor Addons plugin < 1.7.1053 - Cross Site Scripting (XSS) vulnerability

  WProyal · Royal Elementor Addons

  Medium6.5