VulnerabilityBSI CERT-Bund
WP Royal Royal Elementor Addons: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in WP Royal Royal Elementor Addons ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen sowie Daten zu manipulieren oder offenzulegen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Mediumbsi:WID-SEC-2026-41848 linked CVEs
Open advisory with all CVEs
More on Elementor
Other advisories
- MediumCVE-2026-103914WPVibes Dynific Addons for Elementor (formerly Anywhere Elementor): SQL-Injection
- MediumCVE-2026-102564WPVibes Dynific Addons for Elementor (formerly Anywhere Elementor): Code-Injection
- MediumCVE-2026-103914WPVibes Dynific Addons for Elementor (formerly Anywhere Elementor): SQL-Injection
- MediumCVE-2026-102564WPVibes Dynific Addons for Elementor (formerly Anywhere Elementor): Code-Injection
- MediumCVE-2026-119501BdThemes Element Pack Elementor Addons: Cross-Site-Scripting (XSS)
- MediumCVE-2026-120850Elementor Website Builder: Cross-Site-Scripting (XSS)
- MediumCVE-2026-119502BdThemes Ultimate Store Kit Elementor Addons: fehlende Autorisierung
- MediumCVE-2026-119465WPVibes Elementor Addon Elements: vertrauliche Informationen in übertragenen Daten
Other news entries
- WP Royal Royal Elementor Addons: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- WP Royal Royal Elementor Addons: Schwachstelle ermöglicht CodeausführungVulnerabilityBSI CERT-Bund
- Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted LinkNewsThe Hacker News
- Elementor WordPress flaw lets attackers create admin accountsNewsBleepingComputer
- WP Royal Royal Elementor Addons: Schwachstelle ermöglicht Manipulation von DateienVulnerabilityBSI CERT-Bund
- WP Royal Royal Elementor Addons: Schwachstelle ermöglicht Manipulation von DateienVulnerabilityBSI CERT-Bund
- WP Royal Royal Elementor Addons: Schwachstelle ermöglicht Offenlegung von InformationenVulnerabilityBSI CERT-Bund
- Elementor Pro WordPress Plugin Vulnerability Exploited to Hack SitesNewsSecurityWeek
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4184
ID