Vulnerability index

Browse CVEs

45 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Royal Elementor Addons MEDIUM 5.4
CVE-2025-5338

The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and includin…

Fix: 1.7.1025+
Fix from $1,600 2025-06-26
Royal Elementor Addons MEDIUM 5.4
CVE-2025-3813

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_elementor_data’ parameter in all…

Fix: 1.7.1021+
Fix from $1,600 2025-05-31
Royal Elementor Addons MEDIUM 5.4
CVE-2025-39361

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Elementor Addons royal-elementor…

Fix: 1.7.1018+
Fix from $1,600 2025-05-07
Royal Elementor Addons MEDIUM 5.4
CVE-2024-12120

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown widget display_message_t…

Fix: 1.7.1018+
Fix from $1,600 2025-05-07
Royal Elementor Addons MEDIUM 5.4
CVE-2025-1456

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `widgetGrid`, `widgetCountDown`, a…

Fix: 1.7.1013+
Fix from $1,600 2025-04-12
Royal Elementor Addons MEDIUM 5.4
CVE-2025-1455

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Woo Grid widget in all versions up…

Fix: 1.7.1013+
Fix from $1,600 2025-04-12
Royal Elementor Addons HIGH 8.8
CVE-2025-1441

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.1…

Fix: after 1.7.1007
Fix from $1,950 2025-02-19
Royal Elementor Addons MEDIUM 6.1
CVE-2025-0393

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.1…

Fix: after 1.7.1006
Fix from $1,600 2025-01-14
Royal Elementor Addons MEDIUM 5.4
CVE-2024-56062

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Elementor Addons royal-elementor…

Fix: after 1.3.987
Fix from $1,600 2024-12-31
Royal Elementor Addons MEDIUM 6.1
CVE-2024-56226

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Elementor Addons royal-elementor…

Fix: 1.7.1002+
Fix from $1,600 2024-12-31
Royal Elementor Addons MEDIUM 5.4
CVE-2024-9668

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown widget in all v…

Fix: 1.7.1002+
Fix from $1,600 2024-11-13
Royal Elementor Addons MEDIUM 5.4
CVE-2024-9682

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Form Builder widget in al…

Fix: 1.7.1002+
Fix from $1,600 2024-11-13
Royal Elementor Addons MEDIUM 5.4
CVE-2024-9059

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps widget in all versions…

Fix: 1.7.1002+
Fix from $1,600 2024-11-13
Royal Elementor Addons HIGH 7.2
CVE-2024-50442

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows XML Injection.Th…

Fix: 1.3.981+
Fix from $1,950 2024-10-28
Royal Elementor Addons MEDIUM 6.4
CVE-2024-8482

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up…

Fix: 1.3.987+
Fix from $1,600 2024-10-08
Royal Elementor Addons MEDIUM 5.4
CVE-2024-44001

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Elementor Addons royal-elementor…

Fix: after 1.3.982
Fix from $1,600 2024-09-18
Royal Elementor Addons MEDIUM 5.4
CVE-2024-5818

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored DOM-based Cross-Site Scripting via the plugin's Magazine Grid/S…

Fix: 1.3.981+
Fix from $1,600 2024-07-24
Royal Elementor Addons MEDIUM 5.4
CVE-2024-4488

The Royal Elementor Addons and Templates for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘inline_list’ parameter in versions up to…

Fix: 1.3.977+
Fix from $1,600 2024-06-07
Royal Elementor Addons MEDIUM 5.4
CVE-2024-4489

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘custom_upload_mimes’ function in …

Fix: 1.3.977+
Fix from $1,600 2024-06-07
Royal Elementor Addons MEDIUM 5.4
CVE-2024-4342

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's image hotspot, image acco…

Fix: 1.3.976+
Fix from $1,600 2024-06-01
Royal Elementor Addons MEDIUM 5.4
CVE-2024-4087

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Back to Top widget in all…

Fix: 1.3.976+
Fix from $1,600 2024-06-01
Royal Elementor Addons CRITICAL 9.8
CVE-2024-32786

Authentication Bypass by Spoofing vulnerability in WP Royal Royal Elementor Addons allows Functionality Bypass.This issue affects Royal Elementor Add…

Fix: 1.3.95+
Fix from $2,300 2024-05-17
Royal Elementor Addons MEDIUM 5.4
CVE-2024-3887

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Form Builder widget in all version…

Fix: 1.3.975+
Fix from $1,600 2024-05-16
Royal Elementor Addons MEDIUM 6.4
CVE-2024-3675

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Flip Carousel, Flip Box, …

Fix: 1.3.972+
Fix from $1,600 2024-05-02
Royal Elementor Addons CRITICAL 9.8
CVE-2024-1567

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to limited file uploads due to missing file type validation in the 'file_…

Fix: 1.3.95+
Fix from $2,300 2024-05-02
Royal Elementor Addons MEDIUM 6.4
CVE-2024-2798

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widget containers in all …

Fix: 1.3.972+
Fix from $1,600 2024-04-23
Royal Elementor Addons MEDIUM 6.4
CVE-2024-2799

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid & Advanced Text widget …

Fix: 1.3.97+
Fix from $1,600 2024-04-23
Royal Elementor Addons MEDIUM 6.4
CVE-2024-3889

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Advanced Accordion widget…

Fix: 1.3.972+
Fix from $1,600 2024-04-23
Royal Elementor Addons MEDIUM 5.4
CVE-2024-31236

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Elementor Addons allows Stored X…

Fix: 1.3.94+
Fix from $1,600 2024-04-07
Royal Elementor Addons MEDIUM 5.4
CVE-2024-1500

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Logo Widget in all versions up to,…

Fix: 1.3.92+
Fix from $1,600 2024-03-07