Vendor

WP Royal

60 known vulnerabilities in products by WP Royal, 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in WP Royal

Critical	CVE-2023-5360	Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload	9.8	31.10.2023
Critical	CVE-2024-1567	Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload also in 1 other product	8.2	02.05.2024
High	CVE-2023-5922	Royal Elementor Addons and Templates < 1.3.81 - Unauthenticated Arbitrary Post Read	7.5	16.01.2024
Medium	CVE-2022-4710	Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scripting also in 1 other product	6.1	10.01.2023
High	CVE-2024-50442	Royal Elementor Addons: Improper Restriction of XML External Entity Reference also in 1 other product	6.5	28.10.2024
Medium	CVE-2024-3675	Royal Addons for Elementor – Addons and Templates Kit for Elementor: Cross-site Scripting also in 1 other product	6.4	02.05.2024
High	CVE-2022-4700	Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation also in 1 other product	5.4	10.01.2023
High	CVE-2022-4704	Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import also in 1 other product	5.4	10.01.2023
Medium	CVE-2022-4702	Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation also in 1 other product	5.4	10.01.2023
High	CVE-2026-40720	WordPress Royal Elementor Addons Pro plugin < 1.7.1041 - Cross Site Scripting (XSS) vulnerability also in 1 other product	7.1	17.06.2026
High	CVE-2022-4703	Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion also in 1 other product	4.3	10.01.2023
Medium	CVE-2024-8482	Royal Addons for Elementor – Addons and Templates Kit for Elementor: Cross-site Scripting also in 1 other product	6.4	08.10.2024
Medium	CVE-2024-0442	Royal Addons for Elementor – Addons and Templates Kit for Elementor: Cross-site Scripting also in 1 other product	6.4	20.02.2024
Medium	CVE-2024-9682	Royal Addons for Elementor – Addons and Templates Kit for Elementor: Cross-site Scripting also in 1 other product	6.4	13.11.2024
Medium	CVE-2024-9668	Royal Addons for Elementor – Addons and Templates Kit for Elementor: Cross-site Scripting also in 1 other product	6.4	13.11.2024
Medium	CVE-2024-9059	Royal Addons for Elementor – Addons and Templates Kit for Elementor: Cross-site Scripting also in 1 other product	6.4	13.11.2024
High	CVE-2022-4701	Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation also in 1 other product	4.3	10.01.2023
Medium	CVE-2024-2799	Royal Addons for Elementor – Addons and Templates Kit for Elementor: Cross-site Scripting also in 1 other product	6.4	23.04.2024
Medium	CVE-2023-3709	Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure also in 1 other product	5.3	18.07.2023
High	CVE-2024-56226	Royal Elementor Addons: Cross-site Scripting also in 1 other product	7.1	31.12.2024
Medium	CVE-2022-4711	Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings Update also in 1 other product	4.3	10.01.2023
Medium	CVE-2024-44001	Royal Elementor Addons: Cross-site Scripting also in 1 other product	6.5	17.09.2024
Medium	CVE-2024-31236	WordPress Royal Elementor Addons plugin <= 1.3.93 - Cross Site Scripting (XSS) vulnerability also in 1 other product	6.5	07.04.2024
Medium	CVE-2025-1456	Royal Addons for Elementor – Addons and Templates Kit for Elementor: Cross-site Scripting also in 1 other product	6.4	12.04.2025
Medium	CVE-2025-1455	Royal Addons for Elementor – Addons and Templates Kit for Elementor: Cross-site Scripting also in 1 other product	6.4	12.04.2025

All vulnerabilities in search

Products

Products by WP Royal

Royal Addons for Elementor	58	0

Key figures

Vulnerabilities

Products