WP Royal vulnerabilities
We track 3 vulnerabilities in WP Royal products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 5, 2026.
Latest WP Royal vulnerabilities
- 8.2 High severity
Royal Elementor Addons: Inclusion of Functionality from Untrusted Control Sphere
Inclusion of Functionality from Untrusted Control Sphere vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Royal Elementor Addons: from n/a through <= 1.7.
- 7.2 High severity
Royal Elementor Addons: Improper Restriction of XML External Entity Reference
Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through <= 1.3.980.
- 9.8 Critical severity
Royal Elementor Addons: Authentication Bypass by Spoofing
Authentication Bypass by Spoofing vulnerability in WP Royal Royal Elementor Addons allows Functionality Bypass.This issue affects Royal Elementor Addons: from n/a through 1.3.93.