Vendor

    WProyal

    78 known vulnerabilities in products by WProyal, 0 of them actively exploited (CISA KEV).

    Key figures

    78

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in WProyal
    HighCVE-2026-17123

    WP Royal Royal Elementor Addons: Server-Side Request Forgery (SSRF)

    also in 1 other product

    		8.8
    CriticalCVE-2024-1567

    Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload

    also in 1 other product

    		8.2
    HighCVE-2025-13067

    Unrestricted Upload of File with Dangerous Type (CVE-2025-13067)

    		8.8
    HighCVE-2026-111851

    WordPress Royal Elementor Addons plugin <= 1.7.1068 - Arbitrary Code Execution vulnerability

    also in 1 other product

    		7.6
    MediumCVE-2026-17585

    WP Royal Royal Elementor Addons: Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		5.3
    HighCVE-2025-24766

    WordPress News Magazine X <= 1.2.35 - Local File Inclusion Vulnerability

    		7.5
    MediumCVE-2026-97254

    WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2026-112865

    WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    HighCVE-2026-6229

    Server-Side Request Forgery (SSRF) (CVE-2026-6229)

    		7.2
    MediumCVE-2026-8118

    External Control of File Name or Path (CVE-2026-8118)

    		6.5
    MediumCVE-2026-97255

    WProyal Royal Elementor Addons: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    		5.3
    HighCVE-2026-4803

    Cross-site Scripting (CVE-2026-4803)

    		7.2
    MediumCVE-2026-4024

    Missing Authorization (CVE-2026-4024)

    		5.3
    HighCVE-2026-24382

    WordPress News Magazine X theme <= 1.2.50 - Broken Access Control vulnerability

    		7.5
    MediumCVE-2022-4710

    Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scripting

    also in 1 other product

    		6.1
    MediumCVE-2024-3675

    Royal Addons for Elementor – Addons and Templates Kit for Elementor: Cross-site Scripting

    also in 1 other product

    		6.4
    HighCVE-2022-4700

    Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation

    also in 1 other product

    		5.4
    HighCVE-2022-4704

    Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import

    also in 1 other product

    		5.4
    MediumCVE-2022-4702

    Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation

    also in 1 other product

    		5.4
    MediumCVE-2026-5162

    Cross-site Scripting (CVE-2026-5162)

    		6.4
    HighCVE-2022-4703

    Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion

    also in 1 other product

    		4.3
    MediumCVE-2026-5159

    Cross-site Scripting (CVE-2026-5159)

    		6.4
    MediumCVE-2026-0664

    Cross-site Scripting (CVE-2026-0664)

    		6.4
    MediumCVE-2026-119519

    WordPress Royal Elementor Addons plugin <= 1.7.1068 - Broken Access Control vulnerability

    		4.3
    MediumCVE-2026-6504

    Cross-site Scripting (CVE-2026-6504)

    		6.4

    All vulnerabilities in search

    Products

    Products by WProyal
    Royal Addons For Elementor – Addons And Templates Kit For Elementor600
    Royal Elementor Addons70
    Ashe30
    Bard30