Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

royal-elementor-addons Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2025-5338`Royal Elementor Addons <= 1.7.1028 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published06/26/2025	SeverityMedium
`CVE-2025-3813`Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published05/31/2025	SeverityMedium
`CVE-2025-39361`WordPress Royal Elementor Addons plugin <= 1.7.1017 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productRoyal Elementor Addons	Published05/07/2025	SeverityMedium
`CVE-2024-12120`Royal Elementor Addons and Templates <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published05/07/2025	SeverityMedium
`CVE-2025-26990`WordPress Royal Elementor Addons plugin <= 1.7.1006 - Server Side Request Forgery (SSRF) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productRoyal Elementor Addons	Published04/15/2025	SeverityMedium
`CVE-2025-1456`Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published04/12/2025	SeverityMedium
`CVE-2025-1455`Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published04/12/2025	SeverityMedium
`CVE-2025-1441`Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published02/19/2025	SeverityMedium
`CVE-2025-0393`Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published01/14/2025	SeverityMedium
`CVE-2024-56062`WordPress Royal Elementor Addons and Templates plugin <= 1.3.987 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productRoyal Elementor Addons	Published12/31/2024	SeverityMedium
`CVE-2024-56226`WordPress Royal Elementor Addons plugin <= 1.7.1001 - Reflected Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productRoyal Elementor Addons	Published12/31/2024	SeverityHigh
`CVE-2024-56227`WordPress Royal Elementor Addons plugin <= 1.7.1001 - Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Affected productRoyal Elementor Addons	Published12/31/2024	SeverityMedium
`CVE-2024-10798`Royal Elementor Addons and Templates <= 1.7.1003 - Authenticated (Contributor+) Post Disclosure	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published11/28/2024	SeverityMedium
`CVE-2024-9682`Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Form Builder Widget	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published11/13/2024	SeverityMedium
`CVE-2024-9668`Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published11/13/2024	SeverityMedium
`CVE-2024-9059`Royal Elementor Addons and Template <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Google Maps Widget	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published11/13/2024	SeverityMedium
`CVE-2024-50442`WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productRoyal Elementor Addons	Published10/28/2024	SeverityMedium
`CVE-2024-7417`Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published10/17/2024	SeverityMedium
`CVE-2024-8482`Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published10/08/2024	SeverityMedium
`CVE-2024-44001`WordPress Royal Elementor Addons and Templates plugin <= 1.3.982 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productRoyal Elementor Addons	Published09/17/2024	SeverityMedium
`CVE-2024-5818`Royal Elementor Addons and Templates <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published07/24/2024	SeverityMedium
`CVE-2024-4488`Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Contributor+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published06/07/2024	SeverityMedium
`CVE-2024-4489`Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploads	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published06/07/2024	SeverityMedium
`CVE-2024-4087`Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting via Back to Top Widget	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published06/01/2024	SeverityMedium
`CVE-2024-4342`Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published06/01/2024	SeverityMedium
`CVE-2024-32786`WordPress Royal Elementor Addons and Templates plugin <= 1.3.93 - IP Bypass vulnerability	Exploitation statusNot known exploited	FixYes	Affected productRoyal Elementor Addons	Published05/17/2024	SeverityMedium
`CVE-2024-3887`Royal Elementor Addons and Templates <= 1.3.974 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Builder Widget	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published05/16/2024	SeverityMedium
`CVE-2024-1567`Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published05/02/2024	SeverityHigh
`CVE-2024-3675`Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy List Widget Attributes	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published05/02/2024	SeverityMedium
`CVE-2024-3889`Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Accordion Title Tags	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published04/23/2024	SeverityMedium
`CVE-2024-2798`Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published04/23/2024	SeverityMedium
`CVE-2024-2799`Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published04/23/2024	SeverityMedium
`CVE-2024-31236`WordPress Royal Elementor Addons plugin <= 1.3.93 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productRoyal Elementor Addons	Published04/07/2024	SeverityMedium
`CVE-2024-1500`Royal Elementor Addons and Templates <= 1.3.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Logo Widget	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published03/07/2024	SeverityMedium
`CVE-2024-0516`Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published02/20/2024	SeverityMedium
`CVE-2024-0512`Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlist	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published02/20/2024	SeverityMedium
`CVE-2024-0514`Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_compare	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published02/20/2024	SeverityMedium
`CVE-2024-0515`Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_compare	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published02/20/2024	SeverityMedium
`CVE-2024-0513`Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_wishlist	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published02/20/2024	SeverityMedium
`CVE-2024-0442`Royal Elementor Addons and Templates <= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published02/20/2024	SeverityMedium
`CVE-2024-0511`Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via wpr_update_form_action_meta	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published02/08/2024	SeverityMedium
`CVE-2024-0835`Royal Elementor Kit <= 1.0.116 - Missing Authorization to Arbitrary Transient Update	Exploitation statusNot known exploited	FixYes	Affected productRoyal Elementor Kit	Published02/05/2024	SeverityMedium
`CVE-2023-5922`Royal Elementor Addons and Templates < 1.3.81 - Unauthenticated Arbitrary Post Read	Exploitation statusPublic exploit	FixYes	Affected productRoyal Elementor Addons and Templates	Published01/16/2024	SeverityHigh
`CVE-2023-5360`Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload	Exploitation statusPublic exploit	FixYes	Affected productRoyal Elementor Addons and Templates	Published10/31/2023	SeverityUnknown
`CVE-2022-47175`WordPress Royal Elementor Addons Plugin <= 1.3.75 is vulnerable to Cross Site Request Forgery (CSRF)	Exploitation statusNot known exploited	FixYes	Affected productRoyal Elementor Addons and Templates	Published10/06/2023	SeverityMedium
`CVE-2023-3709`Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published07/18/2023	SeverityMedium
`CVE-2022-4707`Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creation	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published01/10/2023	SeverityMedium
`CVE-2022-4701`Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published01/10/2023	SeverityMedium
`CVE-2022-4703`Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published01/10/2023	SeverityMedium
`CVE-2022-4705`Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Activation	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published01/10/2023	SeverityMedium
`CVE-2022-4704`Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published01/10/2023	SeverityMedium
`CVE-2022-4710`Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published01/10/2023	SeverityMedium
`CVE-2022-4708`Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modification	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published01/10/2023	SeverityMedium
`CVE-2022-4711`Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings Update	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published01/10/2023	SeverityMedium
`CVE-2022-4702`Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published01/10/2023	SeverityMedium
`CVE-2022-4700`Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published01/10/2023	SeverityMedium
`CVE-2022-4709`Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Kit Import	Exploitation statusNot known exploited	FixYes	Affected productRoyal Addons for Elementor – Addons and Templates Kit for Elementor	Published01/10/2023	SeverityMedium
`CVE-2022-4102`Royal Elementor Addons < 1.3.56 - Subscriber+ Arbitrary Post Deletion	Exploitation statusPublic exploit	FixYes	Affected productRoyal Elementor Addons (Elementor Templates, Post Grid, Mega Menu & Header Footer Builder, WooCommerce Builder, Product Grid, Slider, Parallax Image & other Free Elementor Widgets)	Published01/09/2023	SeverityLow
`CVE-2022-4103`Royal Elementor Addons < 1.3.56 - Subscriber+ Arbitrary Post Creation	Exploitation statusPublic exploit	FixYes	Affected productRoyal Elementor Addons (Elementor Templates, Post Grid, Mega Menu & Header Footer Builder, WooCommerce Builder, Product Grid, Slider, Parallax Image & other Free Elementor Widgets)	Published01/09/2023	SeverityMedium

59 / 59 Results

All vulnerabilities loaded

Security vulnerabilities from royal-elementor-addons

royal-elementor-addons

Filters

Run an in-depth assessment with complete web risk management

Popular royal-elementor-addons products

Royal Elementor Addons and Templates