Skip to content
OpenAdvisories

Product · WP Royal

Royal Elementor Kit

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 4.3

    WordPress Royal Elementor Kit theme <= 1.0.116 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in WP Royal Royal Elementor Kit.This issue affects Royal Elementor Kit: from n/a through 1.0.116.

  • Medium 4.3

    Royal Elementor Kit <= 1.0.116 - Missing Authorization to Arbitrary Transient Update

    The Royal Elementor Kit theme for WordPress is vulnerable to unauthorized arbitrary transient update due to a missing capability check on the dismissed_handler function in all versions up to, and including, 1.0.116. This makes it possible for authenticated at…