Known vulnerabilities in the Royal Elementor Addons plugin
46 security advisories have been published for the Royal Elementor Addons plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Royal Elementor Addons - Server-Side Request Forgery (SSRF) (CVE-2026-17123) HIGH
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2026-4803) HIGH
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2026-5159) MEDIUM
- Royal Elementor Addons - Broken Access Control (CVE-2026-4024) MEDIUM
- Royal Elementor Addons - Server-Side Request Forgery (SSRF) (CVE-2026-6229) HIGH
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2026-5428) MEDIUM
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2026-5162) MEDIUM
- Royal Elementor Addons - Broken Access Control (CVE-2026-40763) MEDIUM
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2026-0664) MEDIUM
- Royal Elementor Addons - Security Vulnerability (CVE-2026-28135) HIGH
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2025-6251) MEDIUM
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2025-5338) MEDIUM
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2025-3813) MEDIUM
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2024-12120) MEDIUM
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2025-1456) MEDIUM
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2025-1455) MEDIUM
- Royal Elementor Addons - Cross-Site Request Forgery (CSRF) (CVE-2025-1441) MEDIUM
- Royal Elementor Addons - Cross-Site Request Forgery (CSRF) (CVE-2025-0393) MEDIUM
- Royal Elementor Addons - Information Disclosure (CVE-2024-10798) MEDIUM
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2024-9682) MEDIUM
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2024-9668) MEDIUM
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2024-9059) MEDIUM
- Royal Elementor Addons - Information Disclosure (CVE-2024-7417) MEDIUM
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2024-8482) MEDIUM
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2024-5818) MEDIUM
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2024-4489) MEDIUM
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2024-4488) MEDIUM
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2024-4342) MEDIUM
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2024-4087) MEDIUM
- Royal Elementor Addons - Cross-Site Scripting (XSS) (CVE-2024-3887) MEDIUM