Browse CVEs

MEDIUM 5.4 CVE-2025-5338 The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and includin… Royal Elementor Addons 1.7.1025+ Fix from $1,6002025-06-26 MEDIUM 5.4 CVE-2025-3813 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_elementor_data’ parameter in all… Royal Elementor Addons 1.7.1021+ Fix from $1,6002025-05-31 MEDIUM 5.4 CVE-2025-39361 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Elementor Addons royal-elementor… Royal Elementor Addons 1.7.1018+ Fix from $1,6002025-05-07 MEDIUM 5.4 CVE-2024-12120 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown widget display_message_t… Royal Elementor Addons 1.7.1018+ Fix from $1,6002025-05-07 MEDIUM 5.4 CVE-2025-1456 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `widgetGrid`, `widgetCountDown`, a… Royal Elementor Addons 1.7.1013+ Fix from $1,6002025-04-12 MEDIUM 5.4 CVE-2025-1455 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Woo Grid widget in all versions up… Royal Elementor Addons 1.7.1013+ Fix from $1,6002025-04-12 HIGH 8.8 CVE-2025-1441 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.1… Royal Elementor Addons after 1.7.1007 Fix from $1,9502025-02-19 MEDIUM 6.1 CVE-2025-0393 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.1… Royal Elementor Addons after 1.7.1006 Fix from $1,6002025-01-14 MEDIUM 5.4 CVE-2024-56062 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Elementor Addons royal-elementor… Royal Elementor Addons after 1.3.987 Fix from $1,6002024-12-31 MEDIUM 6.1 CVE-2024-56226 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Elementor Addons royal-elementor… Royal Elementor Addons 1.7.1002+ Fix from $1,6002024-12-31 MEDIUM 5.4 CVE-2024-9668 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown widget in all v… Royal Elementor Addons 1.7.1002+ Fix from $1,6002024-11-13 MEDIUM 5.4 CVE-2024-9682 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Form Builder widget in al… Royal Elementor Addons 1.7.1002+ Fix from $1,6002024-11-13 MEDIUM 5.4 CVE-2024-9059 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps widget in all versions… Royal Elementor Addons 1.7.1002+ Fix from $1,6002024-11-13 HIGH 7.2 CVE-2024-50442 Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows XML Injection.Th… Royal Elementor Addons 1.3.981+ Fix from $1,9502024-10-28 MEDIUM 6.4 CVE-2024-8482 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up… Royal Elementor Addons 1.3.987+ Fix from $1,6002024-10-08 MEDIUM 5.4 CVE-2024-44001 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Elementor Addons royal-elementor… Royal Elementor Addons after 1.3.982 Fix from $1,6002024-09-18 MEDIUM 5.4 CVE-2024-5818 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored DOM-based Cross-Site Scripting via the plugin's Magazine Grid/S… Royal Elementor Addons 1.3.981+ Fix from $1,6002024-07-24 MEDIUM 5.4 CVE-2024-4488 The Royal Elementor Addons and Templates for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘inline_list’ parameter in versions up to… Royal Elementor Addons 1.3.977+ Fix from $1,6002024-06-07 MEDIUM 5.4 CVE-2024-4489 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘custom_upload_mimes’ function in … Royal Elementor Addons 1.3.977+ Fix from $1,6002024-06-07 MEDIUM 5.4 CVE-2024-4342 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's image hotspot, image acco… Royal Elementor Addons 1.3.976+ Fix from $1,6002024-06-01 MEDIUM 5.4 CVE-2024-4087 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Back to Top widget in all… Royal Elementor Addons 1.3.976+ Fix from $1,6002024-06-01 CRITICAL 9.8 CVE-2024-32786 Authentication Bypass by Spoofing vulnerability in WP Royal Royal Elementor Addons allows Functionality Bypass.This issue affects Royal Elementor Add… Royal Elementor Addons 1.3.95+ Fix from $2,3002024-05-17 MEDIUM 5.4 CVE-2024-3887 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Form Builder widget in all version… Royal Elementor Addons 1.3.975+ Fix from $1,6002024-05-16 MEDIUM 6.4 CVE-2024-3675 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Flip Carousel, Flip Box, … Royal Elementor Addons 1.3.972+ Fix from $1,6002024-05-02 CRITICAL 9.8 CVE-2024-1567 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to limited file uploads due to missing file type validation in the 'file_… Royal Elementor Addons 1.3.95+ Fix from $2,3002024-05-02 MEDIUM 6.4 CVE-2024-2798 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widget containers in all … Royal Elementor Addons 1.3.972+ Fix from $1,6002024-04-23 MEDIUM 6.4 CVE-2024-2799 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid & Advanced Text widget … Royal Elementor Addons 1.3.97+ Fix from $1,6002024-04-23 MEDIUM 6.4 CVE-2024-3889 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Advanced Accordion widget… Royal Elementor Addons 1.3.972+ Fix from $1,6002024-04-23 MEDIUM 5.4 CVE-2024-31236 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Elementor Addons allows Stored X… Royal Elementor Addons 1.3.94+ Fix from $1,6002024-04-07 MEDIUM 5.4 CVE-2024-1500 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Logo Widget in all versions up to,… Royal Elementor Addons 1.3.92+ Fix from $1,6002024-03-07