Royal Addons for Elementor < 1.7.1050 - Unauthenticated Custom Post Type Contents Exposure

Description

The plugin is vulnerable to Information Exposure via the get_main_query_args() function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract contents of non-public custom post types, such as Contact Form 7 submissions or WooCommerce coupons.