Login Request a demo
RE
Product
Royal Elementor Addons
by Royal-elementor-addons · last CVE Jun 26, 2025
58
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities58In the news0Timeline
Severity mix
Critical 3High 8Medium 46Low 1
Severity
All severities58Critical3High8Medium46Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Royal Elementor Addons to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-32786
9.8
0%
May 17
WordPress Royal Elementor Addons and Templates plugin <= 1.3.93 - IP Bypass vulnerability
Affected: before 1.3.95
CVE-2024-1567
9.8
1%
May 2
Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload
Affected: before 1.3.95
CVE-2023-5360
9.8
86%
Oct 31
Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload
Affected: before 1.3.79
CVE-2025-1441
8.8
0%
Feb 19
Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Affected: through 1.7.1007
CVE-2022-47175
8.8
0%
Oct 6
WordPress Royal Elementor Addons Plugin <= 1.3.75 is vulnerable to Cross Site Request Forgery (CSRF)
Affected: through 1.3.75
CVE-2022-4701
8.8
1%
Jan 10
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation
Affected: through 1.3.59
CVE-2022-4700
8.8
1%
Jan 10
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation
Affected: through 1.3.59
CVE-2022-4703
8.1
1%
Jan 10
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion
Affected: through 1.3.59
CVE-2022-4704
8.1
1%
Jan 10
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import
Affected: through 1.3.59
CVE-2023-5922
7.5
1%
Jan 16
Royal Elementor Addons and Templates < 1.3.81 - Unauthenticated Arbitrary Post Read
Affected: before 1.3.81
CVE-2024-50442
7.2
1%
Oct 28
WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability
Affected: before 1.3.981
CVE-2022-4707
6.5
0%
Jan 10
Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creation
Affected: through 1.3.59
CVE-2022-4708
6.5
1%
Jan 10
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modification
Affected: through 1.3.59
CVE-2022-4702
6.5
1%
Jan 10
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation
Affected: through 1.3.59
CVE-2022-4709
6.5
1%
Jan 10
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Kit Import
Affected: through 1.3.59
CVE-2024-8482
6.4
0%
Oct 8
Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget
Affected: before 1.3.987
CVE-2024-3675
6.4
1%
May 2
Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy List Widget Attributes
Affected: before 1.3.972
CVE-2024-3889
6.4
0%
Apr 23
Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Accordion Title Tags
Affected: before 1.3.972
CVE-2024-2798
6.4
0%
Apr 23
Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Affected: before 1.3.972
CVE-2024-2799
6.4
0%
Apr 23
Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags
Affected: before 1.3.97
CVE-2024-0442
6.4
0%
Feb 20
Royal Elementor Addons and Templates <= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 1.3.88
CVE-2025-0393
6.1
0%
Jan 14
Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Affected: through 1.7.1006
CVE-2024-56226
6.1
0%
Dec 31
WordPress Royal Elementor Addons plugin <= 1.7.1001 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: before 1.7.1002
CVE-2022-4710
6.1
1%
Jan 10
Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scripting
Affected: through 1.3.59
CVE-2025-5338
5.4
0%
Jun 26
Royal Elementor Addons <= 1.7.1028 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets
Affected: before 1.7.1025
CVE-2025-3813
5.4
0%
May 31
Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 1.7.1021
CVE-2025-39361
5.4
0%
May 7
WordPress Royal Elementor Addons plugin <= 1.7.1017 - Cross Site Scripting (XSS) vulnerability
Affected: before 1.7.1018
CVE-2024-12120
5.4
0%
May 7
Royal Elementor Addons and Templates <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 1.7.1018
CVE-2025-1456
5.4
0%
Apr 12
Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting
Affected: before 1.7.1013
CVE-2025-1455
5.4
0%
Apr 12
Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 1.7.1013
CVE-2024-56062
5.4
0%
Dec 31
WordPress Royal Elementor Addons and Templates plugin <= 1.3.987 - Cross Site Scripting (XSS) vulnerability
Affected: through 1.3.987
CVE-2024-9682
5.4
0%
Nov 13
Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Form Builder Widget
Affected: before 1.7.1002
CVE-2024-9668
5.4
0%
Nov 13
Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Affected: before 1.7.1002
CVE-2024-9059
5.4
0%
Nov 13
Royal Elementor Addons and Template <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Google Maps Widget
Affected: before 1.7.1002
CVE-2024-44001
5.4
0%
Sep 17
WordPress Royal Elementor Addons and Templates plugin <= 1.3.982 - Cross Site Scripting (XSS) vulnerability
Affected: through 1.3.982
CVE-2024-5818
5.4
0%
Jul 24
Royal Elementor Addons and Templates <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget
Affected: before 1.3.981
CVE-2024-4488
5.4
0%
Jun 7
Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 1.3.977
CVE-2024-4489
5.4
0%
Jun 7
Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploads
Affected: before 1.3.977
CVE-2024-4087
5.4
0%
Jun 1
Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting via Back to Top Widget
Affected: before 1.3.976
CVE-2024-4342
5.4
0%
Jun 1
Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 1.3.976
CVE-2024-3887
5.4
0%
May 16
Royal Elementor Addons and Templates <= 1.3.974 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Builder Widget
Affected: before 1.3.975
CVE-2024-31236
5.4
0%
Apr 7
WordPress Royal Elementor Addons plugin <= 1.3.93 - Cross Site Scripting (XSS) vulnerability
Affected: before 1.3.94
CVE-2024-1500
5.4
0%
Mar 7
Royal Elementor Addons and Templates <= 1.3.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Logo Widget
Affected: before 1.3.92
CVE-2024-0516
5.3
0%
Feb 20
Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta
Affected: before 1.3.88
CVE-2023-3709
5.3
1%
Jul 18
Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure
Affected: through 1.3.70
CVE-2025-26990
4.9
0%
Apr 15
WordPress Royal Elementor Addons plugin <= 1.7.1006 - Server Side Request Forgery (SSRF) vulnerability
Affected: before 1.7.1007
CVE-2024-56227
4.3
0%
Dec 31
WordPress Royal Elementor Addons plugin <= 1.7.1001 - Broken Access Control vulnerability
Affected: before 1.7.1002
CVE-2024-10798
4.3
0%
Nov 28
Royal Elementor Addons and Templates <= 1.7.1003 - Authenticated (Contributor+) Post Disclosure
Affected: through 1.7.1003
CVE-2024-7417
4.3
0%
Oct 17
Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure
Affected: through 1.3.986
CVE-2024-0512
4.3
0%
Feb 20
Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlist
Affected: before 1.3.88
Page 1 of 2 · 58 total
12