CVEs we hold for Wproyal
Records whose assigning authority named Wproyal as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-8118Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1058 - 1.7.1059 - Authenticated (Contributor+)…wproyal Royal Addons for Elementor – Addons and Templates…
CVE-2026-6504Royal Addons for Elementor <= 1.7.1058 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag'…wproyal Royal Addons for Elementor – Addons and Templates…
CVE-2026-6229Royal Addons for Elementor <= 1.7.1057 - Authenticated (Contributor+) Server-Side Request Forgery via CSV URL Parameterwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2026-5428Royal Addons for Elementor <= 1.7.1056 - Authenticated (Author+) Stored Cross-Site Scripting via Image Caption Fieldwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2026-5162Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via Instagram Feed…wproyal Royal Addons for Elementor – Addons and Templates…
CVE-2026-5159Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Follow Button…wproyal Royal Addons for Elementor – Addons and Templates…
CVE-2026-4803Royal Addons for Elementor <= 1.7.1056 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter in…wproyal Royal Addons for Elementor – Addons and Templates…
CVE-2026-4305Royal WordPress Backup & Restore Plugin <= 1.0.16 - Reflected Cross-Site Scripting via 'wpr_pending_template' Parameterwproyal Royal WordPress Backup, Restore & Migration Plugin…
CVE-2026-4024Royal Addons for Elementor <= 1.7.1056 - Missing Authorization to Unauthenticated Form Action Meta Modificationwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2026-27421WordPress Royal Elementor Addons plugin < 1.7.1053 - Cross Site Scripting (XSS) vulnerabilityWProyal Royal Elementor Addons
CVE-2026-25436WordPress Royal Elementor Addons plugin < 1.7.1053 - Broken Access Control vulnerabilityWProyal Royal Elementor Addons
CVE-2026-24382WordPress News Magazine X theme <= 1.2.50 - Broken Access Control vulnerabilitywproyal News Magazine X
CVE-2026-2373Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 - Missing Authorization to…wproyal Royal Addons for Elementor – Addons and Templates…
CVE-2026-17585Royal Addons for Elementor <= 1.7.1066 - Unauthenticated Sensitive Information Exposure via Unfiltered meta_query LIKE…wproyal Royal Addons for Elementor – Addons and Templates…
CVE-2026-17123Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder…wproyal Royal Addons for Elementor – Addons and Templates…
CVE-2026-0664Royal Elementor Addons <= 1.7.1049 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API Meta Bypasswproyal Royal Addons for Elementor – Addons and Templates…
CVE-2025-6251Royal Elementor Addons and Templates <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scriptingwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2025-5338Royal Elementor Addons <= 1.7.1028 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple…wproyal Royal Addons for Elementor – Addons and Templates…
CVE-2025-3813Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scriptingwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2025-24766WordPress News Magazine X <= 1.2.35 - Local File Inclusion Vulnerabilitywproyal News Magazine X
CVE-2025-1456Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scriptingwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2025-1455Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scriptingwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2025-1441Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scriptingwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2025-13067Royal Addons for Elementor <= 1.7.1049 - Authenticated (Author+) Arbitrary File Upload via main.php Upload Bypasswproyal Royal Addons for Elementor – Addons and Templates…
CVE-2025-0393Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scriptingwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-9682Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting…wproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-9668Royal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) Stored Cross-Site Scripting via…wproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-9059Royal Elementor Addons and Template <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting…wproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-8482Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team…wproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-7417Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosurewproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-5818Royal Elementor Addons and Templates <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting…wproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-4489Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploadswproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-4488Royal Elementor Addons and Templates <= 1.3.976 - Authenticated (Contributor+) Stored Cross-Site Scriptingwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-4342Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scriptingwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-4087Royal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting via Back to…wproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-3889Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via…wproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-3887Royal Elementor Addons and Templates <= 1.3.974 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form…wproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-37490WordPress Bard theme <= 2.210 - Cross Site Request Forgery (CSRF) vulnerabilitywproyal Bard
CVE-2024-37478WordPress Ashe theme <= 2.233 - Cross Site Request Forgery (CSRF) vulnerabilitywproyal Ashe
CVE-2024-3675Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flip…wproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-2799Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tagswproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-2798Royal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scriptingwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-1567Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Uploadwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-1500Royal Elementor Addons and Templates <= 1.3.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Logo…wproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-12120Royal Elementor Addons and Templates <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scriptingwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-10798Royal Elementor Addons and Templates <= 1.7.1003 - Authenticated (Contributor+) Post Disclosurewproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-10532Bard Extra <= 1.2.7 - Missing Authorization to Authenticated (Subscriber+) Demo Importwproyal Bard Extra
CVE-2024-0835Royal Elementor Kit <= 1.0.116 - Missing Authorization to Arbitrary Transient Updatewproyal Royal Elementor Kit
CVE-2024-0516Royal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_metawproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-0515Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_comparewproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-0514Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_comparewproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-0513Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_wishlistwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-0512Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlistwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-0511Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via wpr_update_form_action_metawproyal Royal Addons for Elementor – Addons and Templates…
CVE-2024-0442Royal Elementor Addons and Templates <= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site Scriptingwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2023-3709Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosurewproyal Royal Addons for Elementor – Addons and Templates…
CVE-2022-4711Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings Updatewproyal Royal Addons for Elementor – Addons and Templates…
CVE-2022-4710Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scriptingwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2022-4709Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Kit Importwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2022-4708Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modificationwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2022-4707Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creationwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2022-4705Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Activationwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2022-4704Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Importwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2022-4703Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletionwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2022-4702Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivationwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2022-4701Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activationwproyal Royal Addons for Elementor – Addons and Templates…
CVE-2022-4700Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activationwproyal Royal Addons for Elementor – Addons and Templates…
71 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.