royal elementor addons vulnerabilities and fixes

Recent CVEs affecting royal elementor addons, with upgrade or downgrade steps. 20 tracked.

Also searched as: royalelementoraddons.

royal elementor addons has 20 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 20. Most recent: 2025-06-26. Highest priority: CVE-2024-50442 (score 34/100).

• CVE-2025-5338 MEDIUM 6.4 UPGRADE The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widg
• CVE-2025-3813 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2025-39361 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal
• CVE-2025-26990 MEDIUM 4.4 UPGRADE Server-Side Request Forgery (SSRF) vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons all
• CVE-2025-1456 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2025-1455 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2025-0393 MEDIUM 6.1 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in a
• CVE-2024-9682 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2024-9668 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2024-9059 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2024-8482 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2024-7417 MEDIUM 4.3 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Information Exposure in all ver
• CVE-2024-5818 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored DOM-based Cross-Site Scr
• CVE-2024-56227 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Exploitin
• CVE-2024-56226 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal
• CVE-2024-56062 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal
• CVE-2024-50442 MEDIUM 6.5 UPGRADE Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-e
• CVE-2024-44001 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal
• CVE-2024-12120 MEDIUM 5.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2024-10798 MEDIUM 4.3 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Information Exposure in all ver

FAQ

How do I fix royal elementor addons vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is royal elementor addons being exploited right now?

None of the tracked royal elementor addons CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which royal elementor addons CVE should I patch first?

CVE-2024-50442 currently ranks highest (34/100): Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-e.

RSS feed for royal elementor addons · ← Back to latest CVEs