WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
royal-elementor-addons
Published
2026-04-16
Title
Royal Addons for Elementor < 1.7.1057 - Contributor+ Stored XSS via Instagram Feed Widget
Slug
royal-elementor-addons
Published
2026-04-23
Title
Royal Addons for Elementor < 1.7.1057 - Author+ Stored XSS
Slug
royal-elementor-addons
Published
2026-05-01
Title
Royal Addons for Elementor < 1.7.1058 - Contributor+ Server-Side Request Forgery via CSV URL Parameter
Slug
royal-elementor-addons
Published
2026-05-01
Title
Royal Addons for Elementor < 1.7.1057 - Unauthenticated Form Action Meta Modification
Slug
royal-elementor-addons
Published
2026-05-04
Title
Royal Elementor Addons < 1.7.1057 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter
Slug
royal-elementor-addons
Published
2026-05-04
Title
Royal Elementor Addons < 1.7.1057 - Contributor+ Stored Cross-Site Scripting via 'Follow Button Text' Parameter
Slug
royal-elementor-addons
Published
2026-03-31
Title
Royal Elementor Addons < 1.7.1057 - Unauthenticated Missing Authorization
Slug
royal-elementor-addons
Published
2026-05-07
Title
Royal Elementor Addons < 1.7.1053 - Unauthenticated Missing Authorization
Slug
royal-elementor-addons
Published
2026-05-07
Title
Royal Elementor Addons < 1.7.1053 - Contributor+ Stored Cross-Site Scripting
Slug
royal-elementor-addons
Published
2026-05-13
Title
Royal Addons for Elementor < 1.7.1059 - Contributor+ Stored Cross-Site Scripting via 'title_tag' Parameter
Slug
royal-elementor-addons
Published
2026-06-18
Title
Royal Addons for Elementor 1.7.1058 - 1.7.1059 - Contributor+ Arbitrary File Read via Data Table Widget CSV File Source
Slug
royal-elementor-addons
Published
2026-06-26
Title
Royal Elementor Addons < 1.7.1063 - Unauthenticated Private Mega Menu Template Disclosure
Slug
royal-elementor-addons
Published
2026-08-10
Title
Royal Elementor Addons < 1.7.1065 - Contributor+ Stored XSS via Icon Box Widget
Slug
royal-elementor-addons
Published
2026-08-15
Title
Royal Addons for Elementor < 1.7.1065 - Contributor+ SSRF via Form Builder Widget 'webhook_url' Setting
Slug
royal-elementor-addons
Published
2026-08-18
Title
Royal Elementor Addons < 1.7.1066 - Admin+ Remote Code Execution via Widget Builder
Slug
royal-elementor-addons
Published
2026-09-11
Title
Royal Elementor Addons < 1.7.1067 - Unauthenticated Post Meta Disclosure via 'wpr_keyword' Parameter
Slug
royal-elementor-addons
Published
2026-08-24
Title
Royal Elementor Addons < 1.7.1066 - Unauthenticated Taxonomy Term Disclosure
Slug
royal-elementor-addons
Published
2026-08-24
Title
Royal Elementor Addons < 1.7.1066 - Unauthenticated Like Count and IP Meta Modification via wpr_likes_init
Slug
royal-elementor-addons
Published
2026-08-24
Title
Royal Elementor Addons < 1.7.1066 - Contributor+ Stored XSS via Image Accordion Widget Effect Settings
Slug
royal-elementor-addons
Published
2026-09-14
Title
Royal Elementor Addons < 1.7.1067 - Unauthenticated Stored HTML Injection in Form Notification Emails
Slug
royal-elementor-addons
Published
2026-10-20
Title
Royal Elementor Addons < 1.7.1069 - Contributor+ RCE
Slug
royal-elementor-addons
Published
2026-10-26
Title
Royal Elementor Addons < 1.7.1070 - Unauthenticated IDOR
Slug
royal-elementor-addons
Published
2026-10-26
Title
Royal Elementor Addons < 1.7.1070 - Contributor+ Stored XSS
Slug
royal-elementor-addons
Published
2026-10-26
Title
Royal Elementor Addons < 1.7.1070 - Contributor+ Stored XSS
Slug
royal-elementor-addons
Published
2026-10-26
Title
Royal Elementor Addons 1.3.68 - 1.7.1069 - Author+ Form Submission Interception via Widget ID Collision