WordPress plugin
Royal Addons for Elementor – Addons and Templates Kit for Elementor security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical1
- High12
- Medium88
- Low0
All Royal Addons for Elementor – Addons and Templates Kit for Elementor vulnerabilities
- High8.8Authenticated (Contributor+) Remote Code Execution
≤1.7.1068Update to 1.7.1069
- High7.2Unauthenticated Arbitrary HTML Injection in Notification Emails
≤1.7.1066Update to 1.7.1067
- High7.2Authenticated (Administrator+) Remote Code Execution
<1.7.1066Update to 1.7.1066
- High8.8Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting
≤1.7.1064Update to 1.7.1065
- High7.2Unauthenticated Stored Cross-Site Scripting via 'status' Parameter in wpr_update_form_action_meta
≤1.7.1056Update to 1.7.1057
- High7.2Authenticated (Contributor+) Server-Side Request Forgery via CSV URL Parameter
≤1.7.1057Update to 1.7.1058
- High7.2Unauthenticated Stored Cross-Site Scripting
<1.7.1041Update to 1.7.1041
- High8.8Authenticated (Author+) Arbitrary File Upload via main.php Upload Bypass
≤1.7.1049Update to 1.7.1050
- High8.2Unauthenticated Limited File Upload
≤1.3.94Update to 1.3.95
- Critical9.8Unauthenticated Arbitrary File Upload
≤1.3.78Update to 1.3.79
- High8.1Authenticated (Subscriber+) Arbitrary Post Deletion
≤1.3.55Update to 1.3.56
- High8.1Cross-Site Request Forgery
≤1.3.55Update to 1.3.56
- High8.8Cross-Site Request Forgery
≤1.3.55Update to 1.3.56
Royal Addons for Elementor – Addons and Templates Kit for Elementor: common questions
Does Royal Addons for Elementor – Addons and Templates Kit for Elementor have known vulnerabilities?
Yes. VulnCrest Radar lists 101 known vulnerabilities in Royal Addons for Elementor – Addons and Templates Kit for Elementor: 1 critical, 12 high, 88 medium. At least one is not fixed in the latest version.
How do I check which version of Royal Addons for Elementor – Addons and Templates Kit for Elementor I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Royal Addons for Elementor – Addons and Templates Kit for Elementor vulnerability?
CVE-2026-119519, published Nov 6, 2026: Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1068 - Missing Authorization. Severity: Medium (CVSS 4.3).
Is any Royal Addons for Elementor – Addons and Templates Kit for Elementor vulnerability listed in CISA KEV?
No. None of the known Royal Addons for Elementor – Addons and Templates Kit for Elementor vulnerabilities is currently listed in the CISA KEV catalog.