royal-elementor-addons Vulnerability Advisory Catalog

Total 59 security vulnerabilities recorded for royal-elementor-addons software and firmware.

← Back to All Vendors
CVE-2024-4087 MEDIUM
Component: royal_elementor_addons

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Back to Top widget in all ...

📅 2024-06-01
CVSS 6.4 Dossier →
Component: royal_elementor_addons

Authentication Bypass by Spoofing vulnerability in WP Royal Royal Elementor Addons allows Functionality Bypass.This issue affects Royal Elementor Addo...

📅 2024-05-17
CVSS 5.3 Dossier →
CVE-2024-3887 MEDIUM
Component: royal_elementor_addons

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Form Builder widget in all versions...

📅 2024-05-16
CVSS 5.4 Dossier →
CVE-2024-3675 MEDIUM
Component: royal_elementor_addons

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Flip Carousel, Flip Box, P...

📅 2024-05-02
CVSS 6.4 Dossier →
Component: royal_elementor_addons

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to limited file uploads due to missing file type validation in the 'file_v...

📅 2024-05-02
CVSS 8.2 Dossier →
CVE-2024-3889 MEDIUM
Component: royal_elementor_addons

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Advanced Accordion widget ...

📅 2024-04-23
CVSS 6.4 Dossier →
CVE-2024-2799 MEDIUM
Component: royal_elementor_addons

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid & Advanced Text widget H...

📅 2024-04-23
CVSS 6.4 Dossier →
CVE-2024-2798 MEDIUM
Component: royal_elementor_addons

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widget containers in all v...

📅 2024-04-23
CVSS 6.4 Dossier →
Component: royal_elementor_addons

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Elementor Addons allows Stored XS...

📅 2024-04-07
CVSS 6.5 Dossier →
CVE-2024-1500 MEDIUM
Component: royal_elementor_addons

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Logo Widget in all versions up to, ...

📅 2024-03-07
CVSS 5.4 Dossier →
CVE-2024-0516 MEDIUM
Component: royal_elementor_addons

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to unauthorized post metadata update due to a missing capability check on ...

📅 2024-02-29
CVSS 5.3 Dossier →
CVE-2024-0515 MEDIUM
Component: royal_elementor_addons

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.87...

📅 2024-02-29
CVSS 4.3 Dossier →
CVE-2024-0514 MEDIUM
Component: royal_elementor_addons

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.87...

📅 2024-02-29
CVSS 4.3 Dossier →
CVE-2024-0513 MEDIUM
Component: royal_elementor_addons

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.87...

📅 2024-02-29
CVSS 4.3 Dossier →
CVE-2024-0512 MEDIUM
Component: royal_elementor_addons

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.87...

📅 2024-02-29
CVSS 4.3 Dossier →
CVE-2024-0442 MEDIUM
Component: royal_elementor_addons

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via element URL parameters in all versions ...

📅 2024-02-29
CVSS 6.4 Dossier →
CVE-2024-0511 MEDIUM
Component: royal_elementor_addons

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.87...

📅 2024-02-08
CVSS 4.3 Dossier →
CVE-2024-0835 MEDIUM
Component: royal_elementor_kit

The Royal Elementor Kit theme for WordPress is vulnerable to unauthorized arbitrary transient update due to a missing capability check on the dismisse...

📅 2024-02-05
CVSS 4.3 Dossier →
Component: royal_elementor_addons

The Royal Elementor Addons and Templates WordPress plugin before 1.3.81 does not ensure that users accessing posts via an AJAX action (and REST endpoi...

📅 2024-01-16
CVSS 7.5 Dossier →
CVE-2023-5360 CRITICAL
Component: royal_elementor_addons

The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated u...

📅 2023-10-31
CVSS 9.8 Dossier →
Component: royal_elementor_addons

Cross-Site Request Forgery (CSRF) vulnerability in P Royal Royal Elementor Addons and Templates plugin <= 1.3.75 versions....

📅 2023-10-06
CVSS 4.3 Dossier →
CVE-2023-3709 MEDIUM
Component: royal_elementor_addons

The Royal Elementor Addons plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 1.3.70 due to th...

📅 2023-07-18
CVSS 5.3 Dossier →
CVE-2022-4711 MEDIUM
Component: royal_elementor_addons

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_save_mega_menu_settings' AJAX action in versi...

📅 2023-01-10
CVSS 4.3 Dossier →
CVE-2022-4710 MEDIUM
Component: royal_elementor_addons

The Royal Elementor Addons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.3.59, due to due t...

📅 2023-01-10
CVSS 6.1 Dossier →
Page 2 of 3 (59 Total Records)