Login Request a demo
WP
Vendor
wproyal
9 products with CVEs on record
83
CVEs
0
On KEV
4
New 30D
Products
RE
Royal Elementor Addons
WProyal
7.6
6 CVEs0 on KEV4 new
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
9.8
59 CVEs0 on KEV0 new
RE
Royal Elementor Addons And Templates
Wproyal
9.8
6 CVEs0 on KEV0 new
AS
Ashe
wproyal
6.1
3 CVEs0 on KEV0 new
BA
Bard
wproyal
6.1
3 CVEs0 on KEV0 new
NM
News Magazine X
wproyal
7.5
2 CVEs0 on KEV0 new
RE
Royal Elementor Kit
wproyal
4.3
2 CVEs0 on KEV0 new
BE
Bard Extra
wproyal
4.3
1 CVEs0 on KEV0 new
RW
Royal WordPress Backup, Restore & Migration Plugin – Backup WordPress Sites Safely
wproyal
6.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-97255
New
RE
Royal Elementor Addons
WProyal
5.3
0%
Oct 26WordPress Royal Elementor Addons plugin <= 1.7.1069 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-97254
New
RE
Royal Elementor Addons
WProyal
6.5
0%
Oct 26WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability
CVE-2026-112865
New
RE
Royal Elementor Addons
WProyal
6.5
0%
Oct 26WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability
CVE-2026-111851
RE
Royal Elementor Addons
WProyal
7.6
0%
Oct 22WordPress Royal Elementor Addons plugin <= 1.7.1068 - Arbitrary Code Execution vulnerability
CVE-2026-17585
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.3
1%
Sep 12Royal Addons for Elementor <= 1.7.1066 - Unauthenticated Sensitive Information Exposure via Unfiltered meta_query LIKE Oracle in 'wpr_keyword' Parameter
CVE-2026-17123
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
8.8
1%
Aug 16Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting
CVE-2026-8118
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.5
0%
Jun 19Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1058 - 1.7.1059 - Authenticated (Contributor+) Arbitrary File Read via Data Table Widget CSV File Source
CVE-2026-6504
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.4
0%
May 14Royal Addons for Elementor <= 1.7.1058 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Parameter
CVE-2026-25436
RE
Royal Elementor Addons
WProyal
5.3
0%
May 7WordPress Royal Elementor Addons plugin < 1.7.1053 - Broken Access Control vulnerability
CVE-2026-27421
RE
Royal Elementor Addons
WProyal
6.5
0%
May 7WordPress Royal Elementor Addons plugin < 1.7.1053 - Cross Site Scripting (XSS) vulnerability
CVE-2026-5159
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.4
0%
May 5Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Follow Button Text' Parameter
CVE-2026-4803
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
7.2
0%
May 5Royal Addons for Elementor <= 1.7.1056 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter in wpr_update_form_action_meta
CVE-2026-4024
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.3
1%
May 2Royal Addons for Elementor <= 1.7.1056 - Missing Authorization to Unauthenticated Form Action Meta Modification
CVE-2026-6229
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
7.2
0%
May 2Royal Addons for Elementor <= 1.7.1057 - Authenticated (Contributor+) Server-Side Request Forgery via CSV URL Parameter
CVE-2026-5428
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.4
0%
Apr 24Royal Addons for Elementor <= 1.7.1056 - Authenticated (Author+) Stored Cross-Site Scripting via Image Caption Field
CVE-2026-5162
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.4
0%
Apr 17Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via Instagram Feed Widget
CVE-2026-4305
RW
Royal WordPress Backup, Restore & Migration Plugin – Backup WordPress Sites Safely
wproyal
6.1
0%
Apr 10Royal WordPress Backup & Restore Plugin <= 1.0.16 - Reflected Cross-Site Scripting via 'wpr_pending_template' Parameter
CVE-2026-39627
AS
Ashe
wproyal
4.3
0%
Apr 8WordPress Ashe theme <= 2.266 - Broken Access Control vulnerability
CVE-2026-0664
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.4
0%
Apr 4Royal Elementor Addons <= 1.7.1049 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API Meta Bypass
CVE-2026-24382
NM
News Magazine X
wproyal
7.5
0%
Mar 25WordPress News Magazine X theme <= 1.2.50 - Broken Access Control vulnerability
CVE-2026-2373
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.3
0%
Mar 17Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure
CVE-2025-13067
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
8.8
0%
Mar 11Royal Addons for Elementor <= 1.7.1049 - Authenticated (Author+) Arbitrary File Upload via main.php Upload Bypass
CVE-2025-63018
BA
Bard
wproyal
4.3
0%
Jan 22WordPress Bard theme <= 2.229 - Broken Access Control vulnerability
CVE-2025-5092
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.4
0%
Nov 20Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library
CVE-2025-6251
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.4
0%
Nov 19Royal Elementor Addons and Templates <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-24766
NM
News Magazine X
wproyal
7.5
1%
Aug 14WordPress News Magazine X <= 1.2.35 - Local File Inclusion Vulnerability
CVE-2025-5338
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.4
0%
Jun 26Royal Elementor Addons <= 1.7.1028 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets
CVE-2025-3813
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.4
0%
May 31Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-12120
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.4
0%
May 7Royal Elementor Addons and Templates <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-1456
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.4
0%
Apr 12Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting
CVE-2025-1455
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.4
0%
Apr 12Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-1441
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
8.8
0%
Feb 19Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
CVE-2025-0393
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.1
0%
Jan 14Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
CVE-2024-37490
BA
Bard
wproyal
4.3
0%
Jan 2WordPress Bard theme <= 2.210 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-37478
AS
Ashe
wproyal
4.3
0%
Jan 2WordPress Ashe theme <= 2.233 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-10798
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
4.3
0%
Nov 28Royal Elementor Addons and Templates <= 1.7.1003 - Authenticated (Contributor+) Post Disclosure
CVE-2024-10532
BE
Bard Extra
wproyal
4.3
1%
Nov 21Bard Extra <= 1.2.7 - Missing Authorization to Authenticated (Subscriber+) Demo Import
CVE-2024-9777
AS
Ashe
wproyal
6.1
0%
Nov 19Ashe <= 2.243 - Reflected Cross-Site Scripting via add_query_arg Parameter
CVE-2024-9830
BA
Bard
wproyal
6.1
0%
Nov 19Bard <= 2.216 - Reflected Cross-Site Scripting via add_query_arg Parameter
CVE-2024-9682
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.4
0%
Nov 13Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Form Builder Widget
CVE-2024-9668
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.4
0%
Nov 13Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
CVE-2024-9059
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.4
0%
Nov 13Royal Elementor Addons and Template <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Google Maps Widget
CVE-2024-7417
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
4.3
0%
Oct 17Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure
CVE-2024-8482
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.4
0%
Oct 8Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget
CVE-2024-5818
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.4
0%
Jul 24Royal Elementor Addons and Templates <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget
CVE-2024-4488
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.4
0%
Jun 7Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-4489
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.4
0%
Jun 7Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploads
CVE-2024-4087
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.4
0%
Jun 1Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting via Back to Top Widget
CVE-2024-4342
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.4
0%
Jun 1Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-32786
RE
Royal Elementor Addons And Templates
Wproyal
9.8
0%
May 17WordPress Royal Elementor Addons and Templates plugin <= 1.3.93 - IP Bypass vulnerability
CVE-2024-3887
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.4
0%
May 16Royal Elementor Addons and Templates <= 1.3.974 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Builder Widget
CVE-2024-1567
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
9.8
1%
May 2Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload
CVE-2024-3675
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.4
1%
May 2Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy List Widget Attributes
CVE-2024-32773
RE
Royal Elementor Kit
Wproyal
4.3
0%
Apr 24WordPress Royal Elementor Kit theme <= 1.0.116 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-3889
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.4
0%
Apr 23Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Accordion Title Tags
CVE-2024-2798
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.4
0%
Apr 23Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
CVE-2024-2799
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
6.4
0%
Apr 23Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags
CVE-2024-1500
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.4
0%
Mar 7Royal Elementor Addons and Templates <= 1.3.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Logo Widget
CVE-2024-0516
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
5.3
0%
Feb 20Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta
CVE-2024-0512
RA
Royal Addons for Elementor – Addons and Templates Kit for Elementor
wproyal
4.3
0%
Feb 20Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlist