Known vulnerabilities in Royal Elementor Addons

Vendor: WP Royal
Software CPE: cpe:2.3:a:wproyal:royal-elementor-addons:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 21
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Royal Elementor Addons Royal Elementor Addons is affected by 21 known vulnerabilities: 1 critical, 5 medium, 15 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110023 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-3813
CWE-79 Low
No
No
1.7.1021 02.06.2025 SB2025060219
#VU109996 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-12120
CWE-79 Low
No
No
1.7.1018 30.05.2025 SB2025053026
#VU105897 - Cross-Site Request Forgery (CSRF)
CVE-2025-0393
CWE-352 Low
No
No
1.7.1007 20.03.2025 SB2025032028
#VU101130 - Exposure of sensitive information to an unauthorized actor
CVE-2024-10798
CWE-200 Low
No
No
1.7.1004 03.12.2024 SB2024120352
#VU98842 - Exposure of sensitive information to an unauthorized actor
CVE-2024-7417
CWE-200 Low
No
No
1.3.987 21.10.2024 SB2024102139
#VU82104 - Unrestricted Upload of File with Dangerous Type
CVE-2023-5360
CWE-434 Critical
Available
Exploited
1.3.79 17.10.2023 SB2023101736
#VU82103 - Cross-Site Request Forgery (CSRF)
CVE-2022-47175
CWE-352 Medium
No
No
1.3.76 17.10.2023 SB2023101735
#VU82101 - Cross-Site Request Forgery (CSRF)
CVE-2022-4102
CWE-352 Low
No
No
1.3.56 17.10.2023 SB2023010937
#VU78452 - Exposure of sensitive information to an unauthorized actor
CVE-2023-3709
CWE-200 Medium
No
No
1.3.71 20.07.2023 SB2023072065
SB20230820225
SB20230820226
and 3 more
#VU71396 - Improper Access Control
CVE-2022-4708
CWE-284 Low
No
No
1.3.60 20.01.2023 SB2023012022
#VU71395 - Improper Access Control
CVE-2022-4709
CWE-284 Low
No
No
1.3.60 20.01.2023 SB2023012022
#VU71394 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-4710
CWE-79 Low
No
No
1.3.60 20.01.2023 SB2023012022
#VU71393 - Improper Access Control
CVE-2022-4711
CWE-284 Low
No
No
1.3.60 20.01.2023 SB2023012022
#VU71392 - Improper Access Control
CVE-2022-4704
CWE-284 Medium
No
No
1.3.60 20.01.2023 SB2023012022
#VU71391 - Improper Access Control
CVE-2022-4703
CWE-284 Low
No
No
1.3.60 20.01.2023 SB2023012022
#VU71390 - Improper Access Control
CVE-2022-4705
CWE-284 Low
No
No
1.3.60 20.01.2023 SB2023012022
#VU71389 - Cross-Site Request Forgery (CSRF)
CVE-2022-4707
CWE-352 Low
No
No
1.3.60 20.01.2023 SB2023012022
#VU71388 - Improper Access Control
CVE-2022-4700
CWE-284 Medium
No
No
1.3.60 20.01.2023 SB2023012022
#VU71387 - Improper Access Control
CVE-2022-4701
CWE-284 Low
No
No
1.3.60 20.01.2023 SB2023012022
#VU71386 - Improper Access Control
CVE-2022-4702
CWE-284 Medium
No
No
1.3.60 20.01.2023 SB2023012022


Showing elements 1 - 20 out of 21