Royal-elementor-addons vulnerabilities
We track 7 vulnerabilities in Royal-elementor-addons products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on February 19, 2025.
Latest Royal-elementor-addons vulnerabilities
- 8.8 High severity
Royal Addons for Elementor – Addons and…: Cross-Site Request Forgery
The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.1007. This is due to missing or incorrect nonce validation on the 'wpr_filter_woo_products' function. This makes
- 9.8 Critical severity
Royal Addons for Elementor – Addons and…: Unrestricted Upload of File with Dangerous Type
The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to limited file uploads due to missing file type validation in the 'file_validity' function in all versions up to, and including, 1.3.94. This makes it possible for unauthenticated att
- 9.8 Critical severity
Royal Elementor Addons and Templates: Unrestricted Upload of File with Dangerous Type
The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.
- 8.1 High severity
Royal Addons for Elementor – Addons and…: Improper Access Control
The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_import_templates_kit' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permi
- 8.1 High severity
Royal Addons for Elementor – Addons and…: Improper Access Control
The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_reset_previous_import' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level perm
- 8.8 High severity
Royal Addons for Elementor – Addons and…: Improper Authorization
The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_required_plugins' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level
- 8.8 High severity
Royal Addons for Elementor – Addons and…: Improper Access Control
The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_required_theme' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level pe