Vulnerability · Published Jan 10, 2023 · Assigned by Wordfence
CVE-2022-4707Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creation
Medium 4.3
In plain English
A medium-severity cross-site request forgery in Royal Addons for Elementor – Addons and Templates Kit for Elementor from wproyal. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).
Official description
The Royal Elementor Addons plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.59. This is due to missing nonce validation in the 'wpr_create_mega_menu_template' AJAX function. This allows unauthenticated attackers to create Mega Menu templates, granted they can trick an administrator into performing an action, such as clicking a link.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| wproyal | Royal Addons for Elementor – Addons and Templates Kit for Elementor | 0 – through 1.3.59 |
Weakness: CWE-352 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/55db7d81-7ffb-49da-b64e-23e892bddc57?source=cve
- https://plugins.trac.wordpress.org/browser/royal-elementor-addons/trunk/admin/mega-menu.php?rev=2809656
- https://www.wordfence.com/blog/2023/01/eleven-vulnerabilities-patched-in-royal-elementor-addons/
- https://www.wordfence.com/threat-intel/vulnerabilities/id/55db7d81-7ffb-49da-b64e-23e892bddc57 x_transferred