Skip to content
OpenAdvisories
Medium WID-SEC-2026-4184 8 CVEs

WP Royal Royal Elementor Addons: Mehrere Schwachstellen

Published Oct 26, 2026 · Updated Oct 28, 2026 · Revision 3 · de-DE

Vendor: WP Royal Product: Royal Elementor Addons Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in WP Royal Royal Elementor Addons ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen sowie Daten zu manipulieren oder offenzulegen.

Product

Royal Elementor Addons ist eine vielseitige und intuitive Page Builder-Erweiterung für das WordPress Content Management System.

Vulnerabilities 8

  • Medium 6.8
    CVE-2026-107098

    Royal Elementor Addons 1.7.1037 - 1.7.1069 - Contributor+ Stored XSS via Google Maps Widget Height Setting

    The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not sanitise and escape one of its map widget's size settings before concatenating it into an HTML attribute, allowing users with the Contributor role or above to inject JavaScript that runs…

    Web / CMS
  • Medium 6.5
    CVE-2026-112865

    WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows DOM-Based XSS.This issue affects Royal Elementor Addons: from n/a through 1.7.1069.

    WP Royal Royal Elementor Addons
  • Medium 6.5
    CVE-2026-97254

    WordPress Royal Elementor Addons plugin <= 1.7.1069 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Stored XSS.This issue affects Royal Elementor Addons: from n/a through 1.7.1069.

    WP Royal Royal Elementor Addons
  • Medium 5.3
    CVE-2026-106648

    Royal Elementor Addons < 1.7.1070 - Unauthenticated Arbitrary Email Recipient Injection via Form Field ID Shortcodes

    The Royal Elementor Addons WordPress plugin before 1.7.1070 does not validate submitted form field values before substituting them into the recipient addresses of its form notification emails, allowing unauthenticated attackers to replace the recipient list a…

    Web / CMS
  • Medium 5.3
    CVE-2026-107097

    Royal Elementor Addons 1.3.71 - 1.7.1069 - Unauthenticated Mailchimp Audience Injection via mailchimp_subscribe

    The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not perform any authorization check before using the site owner's stored Mailchimp credential to add subscriber records to an audience chosen by the request, allowing unauthenticated attacke…

    Web / CMS
  • Medium 5.3
    CVE-2026-107100

    Royal Elementor Addons 1.3.81 - 1.7.1069 - Unauthenticated Non-Public Post Content Disclosure via wpr_get_page_content

    The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not verify that a requested post is publicly viewable before returning its content via an unauthenticated AJAX action, relying only on the published status and not on the post type's visibil…

    Web / CMS
  • Medium 5.3
    CVE-2026-97255

    WordPress Royal Elementor Addons plugin <= 1.7.1069 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Royal Elementor Addons: from n/a through 1.7.106…

    WP Royal Royal Elementor Addons
  • Low 3.8
    CVE-2026-106647

    Royal Elementor Addons 1.3.68 - 1.7.1069 - Author+ Form Submission Interception via Widget ID Collision

    The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not scope a contact form's email delivery configuration to the form's own document or owner, instead storing it in a site-global namespace keyed only on a non-secret, author-chosen identifie…

    Web / CMS

Revision history

  1. #3

    Referenz(en) aufgenommen: EUVD-2026-111971

  2. #2

    Referenz(en) aufgenommen: EUVD-2026-111708, EUVD-2026-111707, EUVD-2026-111705, EUVD-2026-111706

  3. #1

    Initiale Fassung

References