Royal Addons for Elementor – Addons and Templates Kit for Elementor

Güvenlik açıkları

• CVE-2024-32786kimlik doğrulamasız≤ 1.3.93

  WordPress Royal Elementor Addons and Templates plugin <= 1.3.93 - IP Bypass vulnerability

  Kritik 9.8

• CVE-2024-1567kimlik doğrulamasız≤ 1.3.94

  Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload

  Kritik 9.8

• CVE-2025-1441kimlik doğrulamasız · tıklama gerekir≤ 1.7.1007

  Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting

  Yüksek 8.8

• CVE-2022-47175kimlik doğrulamasız · tıklama gerekir≤ 1.3.75

  WordPress Royal Elementor Addons Plugin <= 1.3.75 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2022-4701abone+≤ 1.3.59

  Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation

  Yüksek 8.8

• CVE-2022-4700abone+≤ 1.3.59

  Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation

  Yüksek 8.8

• CVE-2026-17123katılımcı+≤ 1.7.1064

  Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting

  Yüksek 8.8

• CVE-2025-13067yazar+≤ 1.7.1049

  Royal Addons for Elementor <= 1.7.1049 - Authenticated (Author+) Arbitrary File Upload via main.php Upload Bypass

  Yüksek 8.8

• CVE-2026-28135kimlik doğrulamasız≤ 1.7.1052

  WordPress Royal Elementor Addons plugin <= 1.7.1052 - Other vulnerability Type vulnerability

  Yüksek 8.2

• CVE-2022-4704abone+≤ 1.3.59

  Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import

  Yüksek 8.1

• CVE-2022-4703abone+≤ 1.3.59

  Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion

  Yüksek 8.1

• CVE-2026-4803kimlik doğrulamasız≤ 1.7.1056

  Royal Addons for Elementor <= 1.7.1056 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter in wpr_update_form_action_meta

  Yüksek 7.2

• CVE-2026-6229katılımcı+≤ 1.7.1057

  Royal Addons for Elementor <= 1.7.1057 - Authenticated (Contributor+) Server-Side Request Forgery via CSV URL Parameter

  Yüksek 7.2

• CVE-2024-50442yüksek yetki≤ 1.3.980

  WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability

  Yüksek 7.2

• CVE-2022-4707kimlik doğrulamasız · tıklama gerekir≤ 1.3.59

  Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creation

  Orta 6.5

• CVE-2026-27421giriş gerekir→ 1.7.1053

  WordPress Royal Elementor Addons plugin < 1.7.1053 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2025-39543giriş gerekir≤ 1.3.977

  WordPress Royal Elementor Addons plugin <= 1.3.977 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2022-4709abone+≤ 1.3.59

  Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Kit Import

  Orta 6.5

• CVE-2022-4708abone+≤ 1.3.59

  Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modification

  Orta 6.5

• CVE-2022-4702abone+≤ 1.3.59

  Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation

  Orta 6.5

• CVE-2026-8118katılımcı+≤ 1.7.1059

  Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1058 - 1.7.1059 - Authenticated (Contributor+) Arbitrary File Read via Data Table Widget

  Orta 6.5

• CVE-2026-6504katılımcı+≤ 1.7.1058

  Royal Addons for Elementor <= 1.7.1058 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Parameter

  Orta 6.4

• CVE-2026-5159katılımcı+≤ 1.7.1056

  Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Follow Button Text' Parameter

  Orta 6.4

• CVE-2026-5428yazar+≤ 1.7.1056

  Royal Addons for Elementor <= 1.7.1056 - Authenticated (Author+) Stored Cross-Site Scripting via Image Caption Field

  Orta 6.4

• CVE-2026-5162katılımcı+≤ 1.7.1056

  Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via Instagram Feed Widget

  Orta 6.4

• CVE-2026-0664katılımcı+≤ 1.7.1049

  Royal Elementor Addons <= 1.7.1049 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API Meta Bypass

  Orta 6.4

• CVE-2025-6251katılımcı+≤ 1.7.1036

  Royal Elementor Addons and Templates <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2024-8482katılımcı+≤ 1.3.986

  Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget

  Orta 6.4

• CVE-2024-3675katılımcı+≤ 1.3.971

  Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy

  Orta 6.4

• CVE-2024-3889katılımcı+≤ 1.3.971

  Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Accordion Title Tags

  Orta 6.4

• CVE-2024-2799katılımcı+≤ 1.3.971

  Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags

  Orta 6.4

• CVE-2024-2798katılımcı+≤ 1.3.971

  Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

  Orta 6.4

• CVE-2024-0442katılımcı+≤ 1.3.87

  Royal Elementor Addons and Templates <= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2025-0393kimlik doğrulamasız · tıklama gerekir≤ 1.7.1006

  Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2024-56226kimlik doğrulamasız · tıklama gerekir≤ 1.7.1001

  WordPress Royal Elementor Addons plugin <= 1.7.1001 - Reflected Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2022-4710kimlik doğrulamasız · tıklama gerekir≤ 1.3.59

  Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2025-39361giriş gerekir≤ 1.7.1017

  WordPress Royal Elementor Addons plugin <= 1.7.1017 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-56062giriş gerekir≤ 1.3.987

  WordPress Royal Elementor Addons and Templates plugin <= 1.3.987 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-44001giriş gerekir≤ 1.3.982

  WordPress Royal Elementor Addons and Templates plugin <= 1.3.982 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-31236giriş gerekir≤ 1.3.93

  WordPress Royal Elementor Addons plugin <= 1.3.93 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2025-5338katılımcı+≤ 1.7.1028

  Royal Elementor Addons <= 1.7.1028 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets

  Orta 5.4

• CVE-2025-3813katılımcı+≤ 1.7.1020

  Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2024-12120katılımcı+≤ 1.7.1017

  Royal Elementor Addons and Templates <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2025-1456katılımcı+≤ 1.7.1012

  Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2025-1455katılımcı+≤ 1.7.1012

  Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2024-9682katılımcı+≤ 1.7.1001

  Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Form Builder Widget

  Orta 5.4

• CVE-2024-9668katılımcı+≤ 1.7.1001

  Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

  Orta 5.4

• CVE-2024-9059katılımcı+≤ 1.7.1001

  Royal Elementor Addons and Template <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Google Maps Widget

  Orta 5.4

• CVE-2024-5818katılımcı+≤ 1.3.980

  Royal Elementor Addons and Templates <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget

  Orta 5.4

• CVE-2024-4489yazar+≤ 1.3.976

  Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploads

  Orta 5.4

• CVE-2024-4488katılımcı+≤ 1.3.976

  Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2024-4342katılımcı+≤ 1.3.975

  Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2024-4087katılımcı+≤ 1.3.975

  Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting via Back to Top Widget

  Orta 5.4

• CVE-2024-3887katılımcı+≤ 1.3.974

  Royal Elementor Addons and Templates <= 1.3.974 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Builder Widget

  Orta 5.4

• CVE-2024-1500katılımcı+≤ 1.3.91

  Royal Elementor Addons and Templates <= 1.3.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Logo Widget

  Orta 5.4

• CVE-2026-17585kimlik doğrulamasız≤ 1.7.1066

  Royal Addons for Elementor <= 1.7.1066 - Unauthenticated Sensitive Information Exposure via Unfiltered meta_query LIKE Oracle in 'wpr_keyword' Parameter

  Orta 5.3

• CVE-2026-25436kimlik doğrulamasız→ 1.7.1053

  WordPress Royal Elementor Addons plugin < 1.7.1053 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2026-4024kimlik doğrulamasız≤ 1.7.1056

  Royal Addons for Elementor <= 1.7.1056 - Missing Authorization to Unauthenticated Form Action Meta Modification

  Orta 5.3

• CVE-2026-40763kimlik doğrulamasız≤ 1.7.1056

  WordPress Royal Elementor Addons plugin <= 1.7.1056 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2024-0516kimlik doğrulamasız≤ 1.3.87

  Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta

  Orta 5.3

• CVE-2023-3709kimlik doğrulamasız≤ 1.3.70

  Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure

  Orta 5.3

• CVE-2025-26990yüksek yetki≤ 1.7.1006

  WordPress Royal Elementor Addons plugin <= 1.7.1006 - Server Side Request Forgery (SSRF) vulnerability

  Orta 4.9

• CVE-2024-0515kimlik doğrulamasız · tıklama gerekir≤ 1.3.87

  Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_compare

  Orta 4.3

• CVE-2024-0514kimlik doğrulamasız · tıklama gerekir≤ 1.3.87

  Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_compare

  Orta 4.3

• CVE-2024-0513kimlik doğrulamasız · tıklama gerekir≤ 1.3.87

  Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_wishlist

  Orta 4.3

• CVE-2024-0512kimlik doğrulamasız · tıklama gerekir≤ 1.3.87

  Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlist

  Orta 4.3

• CVE-2024-0511kimlik doğrulamasız · tıklama gerekir≤ 1.3.87

  Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via wpr_update_form_action_meta

  Orta 4.3

• CVE-2024-56227giriş gerekir≤ 1.7.1001

  WordPress Royal Elementor Addons plugin <= 1.7.1001 - Broken Access Control vulnerability

  Orta 4.3

• CVE-2024-7417abone+≤ 1.3.986

  Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure

  Orta 4.3

• CVE-2022-4711abone+≤ 1.3.59

  Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings Update

  Orta 4.3

• CVE-2022-4705abone+≤ 1.3.59

  Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Activation

  Orta 4.3

• CVE-2024-10798katılımcı+≤ 1.7.1003

  Royal Elementor Addons and Templates <= 1.7.1003 - Authenticated (Contributor+) Post Disclosure

  Orta 4.3