Wproyal vulnerabilities

Products

• Royal Addons For Elementor – Addons And Templates Kit For Elementor 60
• Royal Elementor Addons 20
• Royal Elementor Addons And Templates 6
• Bard 4
• Ashe 3
• Royal Elementor Addons And Templates 3
• News Magazine X 2

Newest

• wproyal royal elementor addons WordPress Royal Elementor Addons plugin <= 1.7.1068 - Broken Access Control vulnerability CVE-2026-119519 4.3 MediumNovember 6, 2026
• unknown royal elementor addons Royal Elementor Addons < 1.7.1070 - Unauthenticated Arbitrary Email Recipient Injection via Form Field ID Shortcodes CVE-2026-106648 5.3 MediumOctober 28, 2026
• wproyal royal elementor addons WordPress Royal Elementor Addons plugin <= 1.7.1069 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-97255 5.3 MediumOctober 26, 2026
• wproyal royal elementor addons WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability CVE-2026-97254 6.5 MediumOctober 26, 2026
• wproyal royal elementor addons WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability CVE-2026-112865 6.5 MediumOctober 26, 2026
• wproyal royal elementor addons WordPress Royal Elementor Addons plugin <= 1.7.1068 - Arbitrary Code Execution vulnerability CVE-2026-111851 7.6 HighOctober 22, 2026
• wproyal royal addons for elementor – addons and templates kit for elementor Royal Addons for Elementor <= 1.7.1066 - Unauthenticated Sensitive Information Exposure via Unfiltered meta_query LIKE Oracle in 'wpr_keyword' Parameter CVE-2026-17585 5.3 MediumSeptember 12, 2026
• wproyal royal addons for elementor – addons and templates kit for elementor Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting CVE-2026-17123 8.8 HighAugust 16, 2026
• wproyal royal addons for elementor – addons and templates kit for elementor Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1058 - 1.7.1059 - Authenticated (Contributor+) Arbitrary File Read via Data Table Widget CSV File Source CVE-2026-8118 6.5 MediumJune 19, 2026
• wproyal royal addons for elementor – addons and templates kit for elementor Royal Addons for Elementor <= 1.7.1058 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Parameter CVE-2026-6504 6.4 MediumMay 14, 2026
• wproyal royal elementor addons WordPress Royal Elementor Addons plugin < 1.7.1053 - Broken Access Control vulnerability CVE-2026-25436 5.3 MediumMay 7, 2026
• wproyal royal elementor addons WordPress Royal Elementor Addons plugin < 1.7.1053 - Cross Site Scripting (XSS) vulnerability CVE-2026-27421 6.5 MediumMay 7, 2026
• wproyal royal addons for elementor – addons and templates kit for elementor Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Follow Button Text' Parameter CVE-2026-5159 6.4 MediumMay 5, 2026
• wproyal royal addons for elementor – addons and templates kit for elementor Royal Addons for Elementor <= 1.7.1056 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter in wpr_update_form_action_meta CVE-2026-4803 7.2 HighMay 5, 2026
• wproyal royal addons for elementor – addons and templates kit for elementor Royal Addons for Elementor <= 1.7.1056 - Missing Authorization to Unauthenticated Form Action Meta Modification CVE-2026-4024 5.3 MediumMay 2, 2026
• wproyal royal addons for elementor – addons and templates kit for elementor Royal Addons for Elementor <= 1.7.1057 - Authenticated (Contributor+) Server-Side Request Forgery via CSV URL Parameter CVE-2026-6229 7.2 HighMay 2, 2026
• wproyal royal addons for elementor – addons and templates kit for elementor Royal Addons for Elementor <= 1.7.1056 - Authenticated (Author+) Stored Cross-Site Scripting via Image Caption Field CVE-2026-5428 6.4 MediumApril 24, 2026
• wproyal royal addons for elementor – addons and templates kit for elementor Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via Instagram Feed Widget CVE-2026-5162 6.4 MediumApril 17, 2026
• wp royal royal elementor addons WordPress Royal Elementor Addons plugin <= 1.7.1056 - Broken Access Control vulnerability CVE-2026-40763 5.3 MediumApril 15, 2026
• wproyal royal wordpress backup, restore & migration plugin – backup wordpress sites safely Royal WordPress Backup & Restore Plugin <= 1.0.16 - Reflected Cross-Site Scripting via 'wpr_pending_template' Parameter CVE-2026-4305 6.1 MediumApril 10, 2026
• wproyal ashe WordPress Ashe theme <= 2.266 - Broken Access Control vulnerability CVE-2026-39627 4.3 MediumApril 8, 2026
• wproyal royal addons for elementor – addons and templates kit for elementor Royal Elementor Addons <= 1.7.1049 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API Meta Bypass CVE-2026-0664 6.4 MediumApril 4, 2026
• wproyal news magazine x WordPress News Magazine X theme <= 1.2.50 - Broken Access Control vulnerability CVE-2026-24382 7.5 HighMarch 25, 2026
• wproyal royal addons for elementor – addons and templates kit for elementor Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure CVE-2026-2373 5.3 MediumMarch 17, 2026
• wproyal royal addons for elementor – addons and templates kit for elementor Royal Addons for Elementor <= 1.7.1049 - Authenticated (Author+) Arbitrary File Upload via main.php Upload Bypass CVE-2025-13067 8.8 HighMarch 11, 2026
• wp royal royal elementor addons WordPress Royal Elementor Addons plugin <= 1.7.1052 - Other vulnerability Type vulnerability CVE-2026-28135 8.2 HighMarch 5, 2026
• wproyal bard WordPress Bard theme <= 2.229 - Broken Access Control vulnerability CVE-2025-63018 4.3 MediumJanuary 22, 2026
• famethemes onepress, galaxyweblinks gallery with thumbnail slider, lightgalleryteam lightgallery wp +5 more +7 more Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library CVE-2025-5092 6.4 MediumNovember 20, 2025
• wproyal royal addons for elementor – addons and templates kit for elementor Royal Elementor Addons and Templates <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-6251 6.4 MediumNovember 19, 2025
• mikado-themes bard WordPress Bard theme <= 1.6 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-64368 5.4 MediumOctober 31, 2025
• wproyal news magazine x WordPress News Magazine X <= 1.2.35 - Local File Inclusion Vulnerability CVE-2025-24766 7.5 HighAugust 14, 2025
• royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 more Royal Elementor Addons <= 1.7.1028 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets CVE-2025-5338 6.4 MediumJune 26, 2025
• royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 more Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-3813 6.4 MediumMay 31, 2025
• royal-elementor-addons royal elementor addons WordPress Royal Elementor Addons plugin <= 1.7.1017 - Cross Site Scripting (XSS) vulnerability CVE-2025-39361 6.5 MediumMay 7, 2025
• royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 more Royal Elementor Addons and Templates <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-12120 5.4 MediumMay 7, 2025
• wp royal royal elementor addons WordPress Royal Elementor Addons plugin <= 1.3.977 - Cross Site Scripting (XSS) vulnerability CVE-2025-39543 6.5 MediumApril 16, 2025
• royal-elementor-addons royal elementor addons WordPress Royal Elementor Addons plugin <= 1.7.1006 - Server Side Request Forgery (SSRF) vulnerability CVE-2025-26990 4.4 MediumApril 15, 2025
• royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 more Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting CVE-2025-1456 6.4 MediumApril 12, 2025
• royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 more Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-1455 6.4 MediumApril 12, 2025
• royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 more Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting CVE-2025-1441 6.1 MediumFebruary 19, 2025
• royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 more Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scripting CVE-2025-0393 6.1 MediumJanuary 14, 2025
• wproyal bard WordPress Bard theme <= 2.210 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-37490 4.3 MediumJanuary 2, 2025
• wproyal ashe WordPress Ashe theme <= 2.233 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-37478 4.3 MediumJanuary 2, 2025
• royal-elementor-addons royal elementor addons WordPress Royal Elementor Addons and Templates plugin <= 1.3.987 - Cross Site Scripting (XSS) vulnerability CVE-2024-56062 6.5 MediumDecember 31, 2024
• royal-elementor-addons royal elementor addons WordPress Royal Elementor Addons plugin <= 1.7.1001 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-56226 7.1 HighDecember 31, 2024
• royal-elementor-addons royal elementor addons WordPress Royal Elementor Addons plugin <= 1.7.1001 - Broken Access Control vulnerability CVE-2024-56227 4.3 MediumDecember 31, 2024
• royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 more Royal Elementor Addons and Templates <= 1.7.1003 - Authenticated (Contributor+) Post Disclosure CVE-2024-10798 4.3 MediumNovember 28, 2024
• wproyal bard extra Bard Extra <= 1.2.7 - Missing Authorization to Authenticated (Subscriber+) Demo Import CVE-2024-10532 4.3 MediumNovember 21, 2024
• wp-royal-themes ashe Ashe <= 2.243 - Reflected Cross-Site Scripting via add_query_arg Parameter CVE-2024-9777 6.1 MediumNovember 19, 2024
• wproyal bard Bard <= 2.216 - Reflected Cross-Site Scripting via add_query_arg Parameter CVE-2024-9830 6.1 MediumNovember 19, 2024
• Show olderLoading…