Royal Addons for Elementor < 1.7.1050 - Author+ Arbitrary File Upload

Description

The plugin is vulnerable to arbitrary file upload due to insufficient file type validation detecting files named main.php, allowing a file with such a name to bypass sanitization. This makes it possible for authenticated attackers, with author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.