WWP Royal

Products

Exploited and recent CVEs

• CVE-2026-40763 Medium 5.3 WordPress Royal Elementor Addons plugin <= 1.7.1056 - Broken Access Control vulnerability 0.2%
• CVE-2026-28135 High 8.2 WordPress Royal Elementor Addons plugin <= 1.7.1052 - Other vulnerability Type vulnerability 0.3%
• CVE-2025-39361 Medium 6.5 WordPress Royal Elementor Addons plugin <= 1.7.1017 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2025-39543 Medium 6.5 WordPress Royal Elementor Addons plugin <= 1.3.977 - Cross Site Scripting (XSS) vulnerability 0.4%
• CVE-2025-26990 Medium 4.4 WordPress Royal Elementor Addons plugin <= 1.7.1006 - Server Side Request Forgery (SSRF) vulnerability 0.2%
• CVE-2024-56244 Medium 5.4 WordPress Ashe Extra plugin <= 1.2.92 - Broken Access Control vulnerability 0.3%
• CVE-2023-46079 Medium 5.4 WordPress Ashe Extra plugin <= 1.2.9 - Broken Access Control + CSRF vulnerability 0.4%
• CVE-2024-56062 Medium 6.5 WordPress Royal Elementor Addons and Templates plugin <= 1.3.987 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-56226 High 7.1 WordPress Royal Elementor Addons plugin <= 1.7.1001 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-56227 Medium 4.3 WordPress Royal Elementor Addons plugin <= 1.7.1001 - Broken Access Control vulnerability 0.3%
• CVE-2024-50442 Medium 6.5 WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability 0.5%
• CVE-2024-44001 Medium 6.5 WordPress Royal Elementor Addons and Templates plugin <= 1.3.982 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-32786 Medium 5.3 WordPress Royal Elementor Addons and Templates plugin <= 1.3.93 - IP Bypass vulnerability 0.5%
• CVE-2024-32773 Medium 4.3 WordPress Royal Elementor Kit theme <= 1.0.116 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
• CVE-2024-31236 Medium 6.5 WordPress Royal Elementor Addons plugin <= 1.3.93 - Cross Site Scripting (XSS) vulnerability 0.4%