Royal Addons for Elementor – Addons and Templates Kit for Elementor

Vulnerabilities 79Slug royal-elementor-addonsLatest version 1.7.1059WordPress.org →

Minimum safe version

1.7.1058

Update to 1.7.1058 or later to address 78 fixable vulnerabilities

Latest available1.7.1059 ✓Affected up to1.3.75 ⚠
Medium 5.3
2026-05-07< 1.7.1053

CVE-2026-25436

CVEWordfence
Medium 6.5
2026-05-07< 1.7.1053

CVE-2026-27421

CVEWordfence
Medium 6.4
2026-05-05< 1.7.1057

CVE-2026-5159

CVEWordfence
Medium 6.4
2026-04-24< 1.7.1057

CVE-2026-5428

CVEWordfence
N/A
2025-11-19< 1.7.1032

Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library

WordfenceCVE
N/A
2025-11-18< 1.7.1037

Royal Elementor Addons and Templates <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting

WordfenceCVE
Medium 6.4
2026-04-17< 1.7.1057

CVE-2026-5162

CVEWordfence
N/A
2026-03-16< 1.7.1050

Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure

WordfenceCVE
N/A
2026-04-03< 1.7.1050

Royal Elementor Addons <= 1.7.1049 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API Meta Bypass

WordfenceCVE
Medium 5.3
2025-12-15< 1.7.1037

CVE-2025-11363

CVEWordfence
Medium 6.4
2025-06-26< 1.7.1029

Royal Elementor Addons <= 1.7.1028 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets

EUVDWordfenceCVE
Medium 6.4
2025-05-31< 1.7.1021

Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scripting

EUVDWordfenceCVE
Medium 6.4
2025-04-12< 1.7.1013

Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting

EUVDWordfenceCVE
Medium 6.4
2025-04-12< 1.7.1013

Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scripting

EUVDWordfenceCVE
Medium 6.1
2025-02-19< 1.7.1008

Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting

EUVDWordfenceCVE
Medium 6.1
2025-01-13< 1.7.1007

Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Stored Cross-Site Scripting

WordfenceCVE
Medium 4.3
2024-12-31< 1.7.1002

CVE-2024-56227

CVEWordfence
Medium 6.3
2024-10-16< 1.3.33

Freemius SDK <= 2.4.2 - Missing Authorization Checks

CVE
Medium 5.4
2024-11-13< 1.7.1002

CVE-2024-9059

CVEWordfence
Medium 5.4
2024-11-26< 1.7.1002

WordPress Royal Elementor Addons Plugin <= 1.7.1001 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfence
Medium 5.4
2024-11-13< 1.7.1002

CVE-2024-9668

CVEWordfence
Medium 5.4
2024-06-03< 1.3.976

WordPress Royal Elementor Addons Plugin <= 1.3.975 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfence
N/A
2023-07-18< 1.3.71

WordPress Royal Elementor Addons Plugin < 1.3.71 is vulnerable to Cross Site Scripting (XSS)

PatchstackWPScanCVE
N/A
2022-03-04< 1.3.33

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Wordfence
N/A
2022-12-06< 1.3.56

Royal Elementor Addons <= 1.3.55 - Cross-Site Request Forgery

Wordfence