royal-elementor-addons vulnerabilities

Recent CVEs affecting royal-elementor-addons products. 40 tracked.

royal-elementor-addons has 40 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 40. Most recent: 2025-06-26. Highest priority: CVE-2024-1567 (score 50/100).

• CVE-2025-5338 MEDIUM 6.4 UPGRADE The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widg
• CVE-2025-3813 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2025-39361 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal
• CVE-2025-26990 MEDIUM 4.4 UPGRADE Server-Side Request Forgery (SSRF) vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons all
• CVE-2025-1456 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2025-1455 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2025-0393 MEDIUM 6.1 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in a
• CVE-2024-9682 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2024-9668 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2024-9059 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2024-8482 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2024-7417 MEDIUM 4.3 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Information Exposure in all ver
• CVE-2024-5818 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored DOM-based Cross-Site Scr
• CVE-2024-56227 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Exploitin
• CVE-2024-56226 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal
• CVE-2024-56062 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal
• CVE-2024-50442 MEDIUM 6.5 UPGRADE Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-e
• CVE-2024-4489 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2024-4488 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘i
• CVE-2024-4342 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2024-4087 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2024-44001 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal
• CVE-2024-3889 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2024-3887 MEDIUM 5.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2024-3675 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2024-32786 MEDIUM 5.3 UPGRADE Authentication Bypass by Spoofing vulnerability in WP Royal Royal Elementor Addons allows Functionality Bypass
• CVE-2024-31236 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal
• CVE-2024-2799 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2024-2798 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2024-1567 HIGH 8.2 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to limited file uploads due to mis
• CVE-2024-1500 MEDIUM 5.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2024-12120 MEDIUM 5.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
• CVE-2024-10798 MEDIUM 4.3 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Information Exposure in all ver
• CVE-2024-0516 MEDIUM 5.3 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to unauthorized post metadata upda
• CVE-2024-0515 MEDIUM 4.3 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in a
• CVE-2024-0514 MEDIUM 4.3 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in a
• CVE-2024-0513 MEDIUM 4.3 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in a
• CVE-2024-0512 MEDIUM 4.3 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in a
• CVE-2024-0511 MEDIUM 4.3 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in a
• CVE-2024-0442 MEDIUM 6.4 UPGRADE The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

FAQ

How do I fix royal-elementor-addons vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is royal-elementor-addons being exploited right now?

None of the tracked royal-elementor-addons CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which royal-elementor-addons CVE should I patch first?

CVE-2024-1567 currently ranks highest (50/100): The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to limited file uploads due to mis.

Products

• royal elementor addons

RSS feed for royal-elementor-addons · ← Back to latest CVEs