Skip to content
OpenAdvisories
Medium WID-SEC-2025-2627 1 CVE

WP Royal Royal Elementor Addons: Schwachstelle ermöglicht Cross-Site Scripting

Published Nov 18, 2025 · Updated Nov 18, 2025 · de-DE

Vendor: WP Royal Product: Royal Elementor Addons Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in WP Royal Royal Elementor Addons ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Royal Elementor Addons ist eine vielseitige und intuitive Page Builder-Erweiterung für das WordPress Content Management System.

Vulnerabilities 1

  • Medium 6.4
    CVE-2025-6251

    Royal Elementor Addons and Templates <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via $item['field_id'] in all versions up to, and including, 1.7.1036 due to insufficient input sanitization and output escaping. This makes it possible …

    WP Royal Royal Addons for Elementor – Addons and Templates Kit for Elementor Web / CMS

Revision history

  1. #1

    Initiale Fassung

References

  • Wordfence Threat Intel vom 2025-11-18
    https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/royal-elementor-addons/royal-elementor-addons-and-templates-171036-authenticated-contributor-stored-cross-site-scripting