Product by Wp Royal

    Royal Elementor Addons

    31 known vulnerabilities in Royal Elementor Addons (Wp Royal), 0 of them actively exploited (CISA KEV).

    Key figures

    31

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Royal Elementor Addons (Wp Royal)
    HighCVE-2026-17123

    WP Royal Royal Elementor Addons: Server-Side Request Forgery (SSRF)

    also in 1 other product

    		8.8
    HighCVE-2026-111851

    WordPress Royal Elementor Addons plugin <= 1.7.1068 - Arbitrary Code Execution vulnerability

    also in 1 other product

    		7.6
    MediumCVE-2026-17585

    WP Royal Royal Elementor Addons: Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		5.3
    MediumCVE-2026-107098

    Royal Addons for Elementor: Cross-Site Scripting (XSS)

    		6.8
    MediumCVE-2026-19226

    Royal Addons for Elementor: Cross-Site Scripting (XSS)

    		6.8
    MediumCVE-2026-13405

    Royal Elementor Addons < 1.7.1066 - Admin+ Remote Code Execution via Widget Builder

    		6.6
    MediumCVE-2026-97254

    WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2026-112865

    WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2026-106648

    Royal Elementor Addons: security vulnerability

    		5.3
    MediumCVE-2026-13407

    Royal Addons for Elementor: security vulnerability

    		6.1
    MediumCVE-2026-97255

    WProyal Royal Elementor Addons: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    		5.3
    MediumCVE-2026-107100

    Royal Addons for Elementor: security vulnerability

    		5.3
    HighCVE-2026-28135

    WordPress Royal Elementor Addons plugin <= 1.7.1052 - Other vulnerability Type vulnerability

    		8.2
    MediumCVE-2026-107097

    Royal Addons for Elementor: security vulnerability

    		5.3
    HighCVE-2024-50442

    Royal Elementor Addons: Improper Restriction of XML External Entity Reference

    also in 1 other product

    		6.5
    MediumCVE-2026-13406

    Royal Elementor Addons < 1.7.1066 - Unauthenticated Taxonomy Term Disclosure

    		5.3
    HighCVE-2026-40720

    WordPress Royal Elementor Addons Pro plugin < 1.7.1041 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		7.1
    MediumCVE-2026-13404

    Royal Addons for Elementor: security vulnerability

    		5.3
    MediumCVE-2026-13402

    Royal Elementor Addons < 1.7.1063 - Unauthenticated Private Mega Menu Template Disclosure

    		5.3
    MediumCVE-2026-19217

    Royal Elementor Addons < 1.7.1065 - Contributor+ Stored XSS via Icon Box Widget

    		5.4
    LowCVE-2026-106647

    Royal Addons for Elementor: security vulnerability

    		3.8
    MediumCVE-2025-39543

    WordPress Royal Elementor Addons plugin <= 1.3.977 - Cross Site Scripting (XSS) vulnerability

    		6.5
    HighCVE-2024-56226

    Royal Elementor Addons: Cross-site Scripting

    also in 1 other product

    		7.1
    MediumCVE-2024-44001

    Royal Elementor Addons: Cross-site Scripting

    also in 1 other product

    		6.5
    MediumCVE-2024-31236

    WordPress Royal Elementor Addons plugin <= 1.3.93 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5

    All vulnerabilities in search

    All products by Wp Royal