← WordPress Vulnerabilities
WordPress security by component

Royal Addons for Elementor – Addons and Templates Kit for Elementor

Elementor templates, Header footer builder, Elementor Post Grid, Woocommerce Grid builder, Slider, Forms, Gallery, Nav menu addons, Elementor widgets.

Plugin slug: royal-elementor-addons · Description source: WordPress.org

CVE-2026-13402: Royal Addons for Elementor: A security weakness

Royal Addons for Elementor is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is < 1.7.1063.

PublishedJul 17, 2026
Known safe version1.7.1063
Safe version
Jul 17, 2026 CVE-2026-13402
Royal Addons for Elementor: A security weakness
Royal Addons for Elementor is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is < 1.7.1063.
1.7.1063
CVE5.3
NVDPending
May 07, 2026 CVE-2026-27421
Royal Elementor Addons: Cross-site scripting
Royal Elementor Addons is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a to < 1.7.1053.
1.7.1053
CVE6.5
NVDPending
May 07, 2026 CVE-2026-25436
Royal Elementor Addons: A security weakness
Royal Elementor Addons is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a to < 1.7.1053.
1.7.1053
CVE5.3
NVDPending
May 05, 2026 CVE-2026-5159
Royal Addons for Elementor – Addons and Templates Kit for Elementor: Cross-site scripting
Royal Addons for Elementor – Addons and Templates Kit for Elementor is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 1.7.1056.
> 1.7.1056
CVE6.4
NVDPending
May 05, 2026 CVE-2026-4803
Royal Addons for Elementor – Addons and Templates Kit for Elementor: Cross-site scripting
Royal Addons for Elementor – Addons and Templates Kit for Elementor is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 1.7.1056.
> 1.7.1056
CVE7.2
NVDPending
May 02, 2026 CVE-2026-4024
Royal Addons for Elementor – Addons and Templates Kit for Elementor: A security weakness
Royal Addons for Elementor – Addons and Templates Kit for Elementor is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 1.7.1056.
> 1.7.1056
CVE5.3
NVDPending
May 02, 2026 CVE-2026-6229
Royal Addons for Elementor – Addons and Templates Kit for Elementor: Server-side request forgery
Royal Addons for Elementor – Addons and Templates Kit for Elementor is affected by server-side request forgery. Exploitation requires at least contributor-level access. The vulnerable server can be induced to make attacker-selected network requests. The published affected range is <= 1.7.1057.
> 1.7.1057
CVE7.2
NVDPending
Apr 24, 2026 CVE-2026-5428
Royal Addons for Elementor – Addons and Templates Kit for Elementor: Cross-site scripting
Royal Addons for Elementor – Addons and Templates Kit for Elementor is affected by cross-site scripting. Exploitation requires at least author-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 1.7.1056.
> 1.7.1056
CVE6.4
NVDPending
Apr 17, 2026 CVE-2026-5162
Royal Addons for Elementor – Addons and Templates Kit for Elementor: Cross-site scripting
Royal Addons for Elementor – Addons and Templates Kit for Elementor is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 1.7.1056.
> 1.7.1056
CVE6.4
NVDPending
Apr 15, 2026 CVE-2026-40763
Royal Elementor Addons: A security weakness
Royal Elementor Addons is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 1.7.1056.
1.7.1057
CVE5.3
NVDPending
Apr 04, 2026 CVE-2026-0664
Royal Addons for Elementor – Addons and Templates Kit for Elementor: Cross-site scripting
Royal Addons for Elementor – Addons and Templates Kit for Elementor is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 1.7.1049.
> 1.7.1049
CVE6.4
NVDPending
Mar 11, 2026 CVE-2025-13067
Royal Addons for Elementor: Dangerous file upload
Royal Addons for Elementor is affected by dangerous file upload. Exploitation requires at least author-level access. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
See mitigation notes
CVE8.8
NVDPending
Mar 05, 2026 CVE-2026-28135
Royal Elementor Addons: A security weakness
Royal Elementor Addons is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE8.2
NVDPending
Dec 15, 2025 CVE-2025-11363
Royal Addons for Elementor: A security weakness
Royal Addons for Elementor is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVDPending
Nov 19, 2025 CVE-2025-6251
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVDPending
Jun 26, 2025 CVE-2025-5338
Royal Elementor Addons: Cross-site scripting
Royal Elementor Addons is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVD5.4
May 31, 2025 CVE-2025-3813
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVD5.4
May 07, 2025 CVE-2025-39361
Royal Elementor Addons: Cross-site scripting
Royal Elementor Addons is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.5
NVD5.4
May 07, 2025 CVE-2024-12120
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE5.4
NVD5.4
Apr 16, 2025 CVE-2025-39543
Royal Elementor Addons: Cross-site scripting
Royal Elementor Addons is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.5
NVDPending
Apr 15, 2025 CVE-2025-26990
Royal Elementor Addons: Server-side request forgery
Royal Elementor Addons is affected by server-side request forgery. Exposure depends on how the affected operation is made reachable by the site. The vulnerable server can be induced to make attacker-selected network requests.
See mitigation notes
CVE4.4
NVD4.9
Apr 12, 2025 CVE-2025-1456
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVD5.4
Apr 12, 2025 CVE-2025-1455
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVD5.4
Feb 19, 2025 CVE-2025-1441
Royal Elementor Addons and Templates: Cross-site request forgery
Royal Elementor Addons and Templates is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE6.1
NVD8.8
Jan 14, 2025 CVE-2025-0393
Royal Elementor Addons and Templates: Cross-site request forgery
Royal Elementor Addons and Templates is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE6.1
NVD6.1
Dec 31, 2024 CVE-2024-56062
Royal Elementor Addons: Cross-site scripting
Royal Elementor Addons is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.5
NVD5.4
Dec 31, 2024 CVE-2024-56227
Royal Elementor Addons: A security weakness
Royal Elementor Addons is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVD4.3
Dec 31, 2024 CVE-2024-56226
Royal Elementor Addons: Cross-site scripting
Royal Elementor Addons is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE7.1
NVD6.1
Nov 28, 2024 CVE-2024-10798
Royal Elementor Addons and Templates: A security weakness
Royal Elementor Addons and Templates is affected by a security weakness. Exploitation requires at least contributor-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVDPending
Nov 13, 2024 CVE-2024-9682
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVD5.4
Nov 13, 2024 CVE-2024-9668
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVD5.4
Nov 13, 2024 CVE-2024-9059
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVD5.4
Oct 28, 2024 CVE-2024-50442
Royal Elementor Addons: A security weakness
Royal Elementor Addons is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE6.5
NVD7.2
Oct 17, 2024 CVE-2024-7417
Royal Elementor Addons and Templates: A security weakness
Royal Elementor Addons and Templates is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVDPending
Oct 08, 2024 CVE-2024-8482
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVDPending
Sep 18, 2024 CVE-2024-44001
Royal Elementor Addons: Cross-site scripting
Royal Elementor Addons is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.5
NVD5.4
Jul 24, 2024 CVE-2024-5818
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVD5.4
Jun 07, 2024 CVE-2024-4489
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVD5.4
Jun 07, 2024 CVE-2024-4488
Royal Elementor Addons: Cross-site scripting
Royal Elementor Addons is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVD5.4
Jun 01, 2024 CVE-2024-4342
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVD5.4
Jun 01, 2024 CVE-2024-4087
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVD5.4
May 17, 2024 CVE-2024-32786
Royal Elementor Addons: Privilege escalation or authentication bypass
Royal Elementor Addons is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
See mitigation notes
CVE5.3
NVD9.8
May 16, 2024 CVE-2024-3887
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE5.4
NVD5.4
May 02, 2024 CVE-2024-3675
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVDPending
May 02, 2024 CVE-2024-1567
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE8.2
NVD9.8
Apr 23, 2024 CVE-2024-3889
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVDPending
Apr 23, 2024 CVE-2024-2799
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVDPending
Apr 23, 2024 CVE-2024-2798
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVDPending
Apr 07, 2024 CVE-2024-31236
Royal Elementor Addons: Cross-site scripting
Royal Elementor Addons is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.5
NVD5.4
Mar 07, 2024 CVE-2024-1500
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE5.4
NVDPending
Feb 29, 2024 CVE-2024-0516
Royal Elementor Addons and Templates: A security weakness
Royal Elementor Addons and Templates is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVDPending
Feb 29, 2024 CVE-2024-0515
Royal Elementor Addons and Templates: Cross-site request forgery
Royal Elementor Addons and Templates is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE4.3
NVDPending
Feb 29, 2024 CVE-2024-0514
Royal Elementor Addons and Templates: Cross-site request forgery
Royal Elementor Addons and Templates is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE4.3
NVDPending
Feb 29, 2024 CVE-2024-0513
Royal Elementor Addons and Templates: Cross-site request forgery
Royal Elementor Addons and Templates is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE4.3
NVDPending
Feb 29, 2024 CVE-2024-0512
Royal Elementor Addons and Templates: Cross-site request forgery
Royal Elementor Addons and Templates is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE4.3
NVDPending
Feb 29, 2024 CVE-2024-0442
Royal Elementor Addons and Templates: Cross-site scripting
Royal Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVDPending
Feb 08, 2024 CVE-2024-0511
Royal Elementor Addons and Templates: Cross-site request forgery
Royal Elementor Addons and Templates is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE4.3
NVD4.3
Jan 16, 2024 CVE-2023-5922
Royal Elementor Addons and Templates: A security weakness
Royal Elementor Addons and Templates is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE7.5
NVD7.5
Oct 31, 2023 CVE-2023-5360
Royal Elementor Addons and Templates: A security weakness
Royal Elementor Addons and Templates is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE9.8
NVD9.8
Oct 06, 2023 CVE-2022-47175
Royal Elementor Addons: Cross-site request forgery
Royal Elementor Addons is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE4.3
NVD8.8
Jul 18, 2023 CVE-2023-3709
Royal Elementor Addons: A security weakness
Royal Elementor Addons is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVDPending
Jan 10, 2023 CVE-2022-4711
Royal Elementor Addons: A security weakness
Royal Elementor Addons is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVD4.3
Jan 10, 2023 CVE-2022-4710
Royal Elementor Addons: Cross-site scripting
Royal Elementor Addons is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.1
NVD6.1
Jan 10, 2023 CVE-2022-4709
Royal Elementor Addons: A security weakness
Royal Elementor Addons is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVD6.5
Jan 10, 2023 CVE-2022-4708
Royal Elementor Addons: A security weakness
Royal Elementor Addons is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVD6.5
Jan 10, 2023 CVE-2022-4707
Royal Elementor Addons: Cross-site request forgery
Royal Elementor Addons is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE4.3
NVD6.5
Jan 10, 2023 CVE-2022-4705
Royal Elementor Addons: A security weakness
Royal Elementor Addons is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVD4.3
Jan 10, 2023 CVE-2022-4704
Royal Elementor Addons: A security weakness
Royal Elementor Addons is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.4
NVD8.1
Jan 10, 2023 CVE-2022-4703
Royal Elementor Addons: A security weakness
Royal Elementor Addons is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVD8.1
Jan 10, 2023 CVE-2022-4702
Royal Elementor Addons: A security weakness
Royal Elementor Addons is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.4
NVD6.5
Jan 10, 2023 CVE-2022-4701
Royal Elementor Addons: A security weakness
Royal Elementor Addons is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVD8.8
Jan 10, 2023 CVE-2022-4700
Royal Elementor Addons: A security weakness
Royal Elementor Addons is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.4
NVD8.8
Jan 09, 2023 CVE-2022-4103
Royal Elementor Addons: Cross-site request forgery
Royal Elementor Addons is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE4.3
NVD4.3
Jan 09, 2023 CVE-2022-4102
Royal Elementor Addons: Cross-site request forgery
Royal Elementor Addons is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE3.1
NVD3.1