Royal Addons For Elementor
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:royal_addons_for_elementor:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Royal Addons For Elementor (91367b59-3e94-5eca-950f-5ab69957ba8d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-19217 |
vulnerable | 2026-09-16 04:34:15.357490 |
Royal Elementor Addons < 1.7.1065 - Contributor+ Stored XSS via Icon Box Widget
The Royal Addons for Elementor WordPress plugin before 1.7.1065 does not validate a widget setting used to build an HTML tag before outputting it, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.
Published: 2026-08-12T06:00:19.085Z
Updated: 2026-08-12T16:04:15.824Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13402 |
vulnerable | 2026-07-29 00:23:33.021322 |
Royal Elementor Addons < 1.7.1063 - Unauthenticated Private Mega Menu Template Disclosure
The Royal Addons for Elementor WordPress plugin before 1.7.1063 does not check the post status of menu items or the templates they reference in one of its REST endpoints, allowing unauthenticated users to retrieve the rendered HTML content of private or draft Elementor templates linked from non-public navigation menu items.
Published: 2026-07-17T06:00:02.627Z
Updated: 2026-07-17T12:56:50.988Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11363 |
vulnerable | 2026-06-08 07:02:28.659217 |
Royal Elementor Addons and Templates < 1.7.1037 - Unauthenticated Media File Upload
The Royal Addons for Elementor WordPress plugin before 1.7.1037 does not have proper authorisation, allowing unauthenticated users to upload media files via the wpr_addons_upload_file action.
Published: 2025-12-15T06:00:03.088Z
Updated: 2025-12-15T14:43:32.956Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.