Login Request a demo
RA
Product
Royal Addons for Elementor – Addons and Templates Kit for Elementor
by wproyal · last CVE Sep 12, 2026
59
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities59In the news0Timeline
Severity mix
Critical 1High 9Medium 49Low 0
Severity
All severities59Critical1High9Medium49Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Royal Addons for Elementor – Addons and Templates Kit for Elementor to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-1567
9.8
1%
May 2
Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload
Affected: through 1.3.94
CVE-2026-17123
8.8
1%
Aug 16
Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting
Affected: through 1.7.1064
CVE-2025-13067
8.8
0%
Mar 11
Royal Addons for Elementor <= 1.7.1049 - Authenticated (Author+) Arbitrary File Upload via main.php Upload Bypass
Affected: through 1.7.1049
CVE-2025-1441
8.8
0%
Feb 19
Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Affected: through 1.7.1007
CVE-2022-4701
8.8
1%
Jan 10
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation
Affected: through 1.3.59
CVE-2022-4700
8.8
1%
Jan 10
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation
Affected: through 1.3.59
CVE-2022-4703
8.1
1%
Jan 10
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion
Affected: through 1.3.59
CVE-2022-4704
8.1
1%
Jan 10
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import
Affected: through 1.3.59
CVE-2026-4803
7.2
0%
May 5
Royal Addons for Elementor <= 1.7.1056 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter in wpr_update_form_action_meta
Affected: through 1.7.1056
CVE-2026-6229
7.2
0%
May 2
Royal Addons for Elementor <= 1.7.1057 - Authenticated (Contributor+) Server-Side Request Forgery via CSV URL Parameter
Affected: through 1.7.1057
CVE-2026-8118
6.5
0%
Jun 19
Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1058 - 1.7.1059 - Authenticated (Contributor+) Arbitrary File Read via Data Table Widget CSV File Source
Affected: 1.7.1058 through 1.7.1059
CVE-2022-4707
6.5
0%
Jan 10
Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creation
Affected: through 1.3.59
CVE-2022-4708
6.5
1%
Jan 10
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modification
Affected: through 1.3.59
CVE-2022-4702
6.5
1%
Jan 10
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation
Affected: through 1.3.59
CVE-2022-4709
6.5
1%
Jan 10
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Kit Import
Affected: through 1.3.59
CVE-2026-6504
6.4
0%
May 14
Royal Addons for Elementor <= 1.7.1058 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Parameter
Affected: through 1.7.1058
CVE-2026-5159
6.4
0%
May 5
Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Follow Button Text' Parameter
Affected: through 1.7.1056
CVE-2026-5428
6.4
0%
Apr 24
Royal Addons for Elementor <= 1.7.1056 - Authenticated (Author+) Stored Cross-Site Scripting via Image Caption Field
Affected: through 1.7.1056
CVE-2026-5162
6.4
0%
Apr 17
Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via Instagram Feed Widget
Affected: through 1.7.1056
CVE-2026-0664
6.4
0%
Apr 4
Royal Elementor Addons <= 1.7.1049 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API Meta Bypass
Affected: through 1.7.1049
CVE-2025-5092
6.4
0%
Nov 20
Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library
Affected: through 1.7.1031
CVE-2025-6251
6.4
0%
Nov 19
Royal Elementor Addons and Templates <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 1.7.1036
CVE-2024-8482
6.4
0%
Oct 8
Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget
Affected: through 1.3.986
CVE-2024-3675
6.4
1%
May 2
Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy List Widget Attributes
Affected: through 1.3.971
CVE-2024-3889
6.4
0%
Apr 23
Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Accordion Title Tags
Affected: through 1.3.971
CVE-2024-2798
6.4
0%
Apr 23
Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Affected: through 1.3.971
CVE-2024-2799
6.4
0%
Apr 23
Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags
Affected: through 1.3.971
CVE-2024-0442
6.4
0%
Feb 20
Royal Elementor Addons and Templates <= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 1.3.87
CVE-2025-0393
6.1
0%
Jan 14
Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Affected: through 1.7.1006
CVE-2022-4710
6.1
1%
Jan 10
Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scripting
Affected: through 1.3.59
CVE-2025-5338
5.4
0%
Jun 26
Royal Elementor Addons <= 1.7.1028 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets
Affected: through 1.7.1028
CVE-2025-3813
5.4
0%
May 31
Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 1.7.1020
CVE-2024-12120
5.4
0%
May 7
Royal Elementor Addons and Templates <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 1.7.1017
CVE-2025-1456
5.4
0%
Apr 12
Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting
Affected: through 1.7.1012
CVE-2025-1455
5.4
0%
Apr 12
Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 1.7.1012
CVE-2024-9682
5.4
0%
Nov 13
Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Form Builder Widget
Affected: through 1.7.1001
CVE-2024-9668
5.4
0%
Nov 13
Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Affected: through 1.7.1001
CVE-2024-9059
5.4
0%
Nov 13
Royal Elementor Addons and Template <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Google Maps Widget
Affected: through 1.7.1001
CVE-2024-5818
5.4
0%
Jul 24
Royal Elementor Addons and Templates <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget
Affected: through 1.3.980
CVE-2024-4488
5.4
0%
Jun 7
Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 1.3.976
CVE-2024-4489
5.4
0%
Jun 7
Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploads
Affected: through 1.3.976
CVE-2024-4087
5.4
0%
Jun 1
Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting via Back to Top Widget
Affected: through 1.3.975
CVE-2024-4342
5.4
0%
Jun 1
Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 1.3.975
CVE-2024-3887
5.4
0%
May 16
Royal Elementor Addons and Templates <= 1.3.974 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Builder Widget
Affected: through 1.3.974
CVE-2024-1500
5.4
0%
Mar 7
Royal Elementor Addons and Templates <= 1.3.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Logo Widget
Affected: through 1.3.91
CVE-2026-17585
5.3
1%
Sep 12
Royal Addons for Elementor <= 1.7.1066 - Unauthenticated Sensitive Information Exposure via Unfiltered meta_query LIKE Oracle in 'wpr_keyword' Parameter
Affected: through 1.7.1066
CVE-2026-4024
5.3
1%
May 2
Royal Addons for Elementor <= 1.7.1056 - Missing Authorization to Unauthenticated Form Action Meta Modification
Affected: through 1.7.1056
CVE-2026-2373
5.3
0%
Mar 17
Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure
Affected: through 1.7.1049
CVE-2024-0516
5.3
0%
Feb 20
Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta
Affected: through 1.3.87
CVE-2023-3709
5.3
1%
Jul 18
Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure
Affected: through 1.3.70
Page 1 of 2 · 59 total
12