Skip to content
OpenAdvisories
Medium WID-SEC-2026-3344 1 CVE

WP Royal Royal Elementor Addons: Schwachstelle ermöglicht Offenlegung von Informationen

Published Sep 13, 2026 · Updated Sep 13, 2026 · de-DE

Vendor: WP Royal Product: Royal Elementor Addons Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in WP Royal Royal Elementor Addons ausnutzen, um Informationen offenzulegen.

Product

Royal Elementor Addons ist eine vielseitige und intuitive Page Builder-Erweiterung für das WordPress Content Management System.

Vulnerabilities 1

  • Medium 5.3
    CVE-2026-17585

    Royal Addons for Elementor <= 1.7.1066 - Unauthenticated Sensitive Information Exposure via Unfiltered meta_query LIKE Oracle in 'wpr_keyword' Parameter

    The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.1066 via the 'wpr_keyword' parameter. This makes it possible for unauthentic…

    WP Royal Royal Addons for Elementor – Addons and Templates Kit for Elementor Web / CMS

Revision history

  1. #1

    Initiale Fassung

References

  • Wordfence Advisory vom 2026-09-13
    https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/royal-elementor-addons/royal-addons-for-elementor-171066-unauthenticated-sensitive-information-exposure-via-unfiltered-meta-query-like-oracle-in-wpr-keyword-parameter
  • WPScan Advisory vom 2026-09-13
    https://wpscan.com/vulnerability/013787e4-7c47-4b5d-ad38-f1030cb9ab42/