Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creation

Wordfence Intelligence   >   Vulnerability Database   >   Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creation
4.3
Cross-Site Request Forgery (CSRF)
CVE CVE-2022-4707
CVSS 4.3 (Medium)
Publicly Published January 10, 2023
Last Updated February 3, 2023
Researcher Ram - Wordfence

Description

The Royal Elementor Addons plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.59. This is due to missing nonce validation in the 'wpr_create_mega_menu_template' AJAX function. This allows unauthenticated attackers to create Mega Menu templates, granted they can trick an administrator into performing an action, such as clicking a link.

References

Share

Vulnerability Details for Royal Addons for Elementor – Addons and Templates Kit for Elementor

Royal Addons for Elementor – Addons and Templates Kit for Elementor

Software Type Plugin
Software Slug royal-elementor-addons (view on wordpress.org)
Patched? Yes
Remediation Update to version 1.3.60, or a newer patched version
Affected Version
  • <= 1.3.59
Patched Version
  • 1.3.60

Recent vulnerabilities in Royal Addons for Elementor – Addons and Templates Kit for Elementor

Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting
8.8
CVE-2026-17123
Aug 15, 2026
Researcher: TarPeg007
Royal Elementor Addons <= 1.7.1064 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2026-19217
Aug 10, 2026
Researcher: Dmitrii Ignatyev
Royal Elementor Addons <= 1.7.1062 - Unauthenticated Information Exposure
5.3
CVE-2026-13402
Jun 26, 2026
Researcher: Pablo González and Francisco José Ramírez
Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1058 - 1.7.1059 - Authenticated (Contributor+) Arbitrary File Read via Data Table Widget CSV File Source
6.5
CVE-2026-8118
Jun 18, 2026
Researcher: Jack Taylor
Royal Addons for Elementor <= 1.7.1058 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Parameter
6.4
CVE-2026-6504
May 13, 2026
Researcher: Romain Deperne (ang3L)
Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 - Missing Authorization
5.3
CVE-2026-25436
May 7, 2026
Researcher: Bao - BlueRock
Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2026-27421
May 7, 2026
Researcher: Peter Thaleikis
Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Follow Button Text' Parameter
6.4
CVE-2026-5159
May 4, 2026
Researcher: Caspian
Royal Addons for Elementor <= 1.7.1056 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter in wpr_update_form_action_meta
7.2
CVE-2026-4803
May 4, 2026
Researcher: andrea bocchetti
Royal Addons for Elementor <= 1.7.1056 - Missing Authorization to Unauthenticated Form Action Meta Modification
5.3
CVE-2026-4024
May 1, 2026
Researcher: Nguyen C
# Title CVE ID CVSS Researchers Date
1 Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting CVE-2026-17123 8.8 TarPeg007 August 15, 2026
2 Royal Elementor Addons <= 1.7.1064 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2026-19217 6.4 Dmitrii Ignatyev August 10, 2026
3 Royal Elementor Addons <= 1.7.1062 - Unauthenticated Information Exposure CVE-2026-13402 5.3 Pablo González and Francisco José Ramírez June 26, 2026
4 Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1058 - 1.7.1059 - Authenticated (Contributor+) Arbitrary File Read via Data Table Widget CSV File Source CVE-2026-8118 6.5 Jack Taylor June 18, 2026
5 Royal Addons for Elementor <= 1.7.1058 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Parameter CVE-2026-6504 6.4 Romain Deperne (ang3L) May 13, 2026
6 Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 - Missing Authorization CVE-2026-25436 5.3 Bao - BlueRock May 7, 2026
7 Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1053 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2026-27421 6.4 Peter Thaleikis May 7, 2026
8 Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Follow Button Text' Parameter CVE-2026-5159 6.4 Caspian May 4, 2026
9 Royal Addons for Elementor <= 1.7.1056 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter in wpr_update_form_action_meta CVE-2026-4803 7.2 andrea bocchetti May 4, 2026
10 Royal Addons for Elementor <= 1.7.1056 - Missing Authorization to Unauthenticated Form Action Meta Modification CVE-2026-4024 5.3 Nguyen C May 1, 2026
View more vulnerabilities in this software package View more vulnerabilities

This record contains material that is subject to copyright.

Copyright 2012-2026 Defiant Inc.

License: Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy. Read more.

Copyright 1999-2026 The MITRE Corporation

License: CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. Read more.

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation