What’s Vulnerable › Products

Royal Addons for Elementor vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Royal Addons for Elementor version is affected

Latest Royal Addons for Elementor vulnerabilities

• CVE-2026-13407 — Royal Elementor Addons < 1.7.1067 - Unauthenticated Stored HTML Injection in Form Notification Emails (CVSS 5.4)
• CVE-2026-19226 — Royal Elementor Addons < 1.7.1066 - Contributor+ Stored XSS via Image Accordion Widget Effect Settings (CVSS 6.8)
• CVE-2026-13406 — Royal Elementor Addons < 1.7.1066 - Unauthenticated Taxonomy Term Disclosure (CVSS 5.3)
• CVE-2026-13404 — Royal Elementor Addons < 1.7.1066 - Unauthenticated Like Count and IP Meta Modification via wpr_likes_init (CVSS 5.3)
• CVE-2026-13405 — Royal Elementor Addons < 1.7.1066 - Admin+ Remote Code Execution via Widget Builder (CVSS 6.6)
• CVE-2026-19217 — Royal Elementor Addons < 1.7.1065 - Contributor+ Stored XSS via Icon Box Widget (CVSS 5.4)
• CVE-2026-13402 — Royal Elementor Addons < 1.7.1063 - Unauthenticated Private Mega Menu Template Disclosure (CVSS 5.3)
• CVE-2025-11363 — Royal Elementor Addons and Templates < 1.7.1037 - Unauthenticated Media File Upload (CVSS 5.3)