Vulnerabilities / Royal Addons for Elementor
Royal Addons for Elementor vulnerabilities
Advisories WPSec published for Royal Addons for Elementor – Addons and Templates Kit for Elementor. Other sources may list more. Its attack surface: Royal Addons for Elementor on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-24 | WPSEC-2026-1589 | Royal Addons for Elementor <= 1.7.1069 - Authenticated (Contributor+) Stored Cross-Site Scripting via Google Maps Widget 'Map Height' Setting | Medium 6.4 | 1.7.1070 |
| 2026-10-24 | WPSEC-2026-1588 | Royal Addons for Elementor <= 1.7.1069 - Unauthenticated Sensitive Information Exposure via Media Grid AJAX Query Settings | Medium 5.3 | 1.7.1070 |
| 2026-10-24 | WPSEC-2026-1587 | Royal Addons for Elementor <= 1.7.1069 - Authenticated (Contributor+) Arbitrary Function Call via Archive Page Types Display Condition | Medium 6.3 | 1.7.1070 |
| 2026-10-24 | WPSEC-2026-1586 | Royal Addons for Elementor <= 1.7.1069 - Unauthenticated Missing Authorization to Mailchimp Subscription and Subscriber Data Exposure via 'listId' Parameter | Medium 6.5 | 1.7.1070 |
| 2026-10-24 | WPSEC-2026-1585 | Royal Addons for Elementor <= 1.7.1069 - Authenticated (Contributor+) Form Builder Notification Settings Overwrite via Site-Wide Options | Medium 5.4 | 1.7.1070 |
License: CC BY 4.0