Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

wproyal vulnerabilities

78 published CVEs name wproyal among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-119519

    WordPress Royal Elementor Addons plugin <= 1.7.1068 - Broken Access Control vulnerability

    WProyal · Royal Elementor Addons

    Medium4.3
  • CVE-2026-97255

    WordPress Royal Elementor Addons plugin <= 1.7.1069 - Insecure Direct Object References (IDOR) vulnerability

    WProyal · Royal Elementor Addons

    Medium5.3
  • CVE-2026-97254

    WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability

    WProyal · Royal Elementor Addons

    Medium6.5
  • CVE-2026-112865

    WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability

    WProyal · Royal Elementor Addons

    Medium6.5
  • CVE-2026-111851

    WordPress Royal Elementor Addons plugin <= 1.7.1068 - Arbitrary Code Execution vulnerability

    WProyal · Royal Elementor Addons

    High7.6
  • CVE-2026-17585

    Royal Addons for Elementor <= 1.7.1066 - Unauthenticated Sensitive Information Exposure via Unfiltered meta_query LIKE Oracle in 'wpr_keyword' Parameter

    wproyal · Royal Addons for Elementor – Addons and Templates Kit for Elementor

    Medium5.3
  • CVE-2026-17123

    Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting

    wproyal · Royal Addons for Elementor – Addons and Templates Kit for Elementor

    High8.8
  • CVE-2026-8118

    Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1058 - 1.7.1059 - Authenticated (Contributor+) Arbitrary File Read via Data Table Widget CSV File Source

    wproyal · Royal Addons for Elementor – Addons and Templates Kit for Elementor

    Medium6.5
  • CVE-2026-6504

    Royal Addons for Elementor <= 1.7.1058 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Parameter

    wproyal · Royal Addons for Elementor – Addons and Templates Kit for Elementor

    Medium6.4
  • CVE-2026-25436

    WordPress Royal Elementor Addons plugin < 1.7.1053 - Broken Access Control vulnerability

    WProyal · Royal Elementor Addons

    Medium5.3
All 78 in the list