High · 7.1 CVE-2026-40720 EUVD-2026-37692GHSA-2p3v-427c-rpc7

WordPress Royal Elementor Addons Pro plugin < 1.7.1041 - Cross Site Scripting (XSS) vulnerability

Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack

Vendor: Royal Elementor Addons Product: Royal Elementor Addons Pro

Description

Unauthenticated Cross Site Scripting (XSS) in Royal Elementor Addons Pro < 1.7.1041 versions.

Affected products

Vendor	Product	Affected	Fixed
Royal Elementor Addons	Royal Elementor Addons Pro	< 1.7.1041	1.7.1041

Advisories 1

WID-SEC-2026-1644 WP Royal Royal Elementor Addons: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Jun 17, 2026

References

https://patchstack.com/database/wordpress/plugin/wpr-addons-pro/vulnerability/wordpress-royal-elementor-addons-pro-plugin-1-7-1041-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry