SecAlerts
r

royal-elementor-addons

Security Risk Profile

35
/100
low

Security Risk Score

Comprehensive risk assessment based on 59 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from January 9, 2023 to present

59
Total CVEs
12
Critical+High
1
Exploited
7
Unpatched

Threat Assessment

Avg CVSS
6.2
Base severity
Avg EPSS
6%
Exploit probability
Unpatched
7
Critical/High
Risk Level
35/100
low
⚠️ 1 Active Exploits

Severity Distribution

Critical
3
High
9
Medium
46
Low
1

Exploit Likelihood

>50% chance
1
20-50%
0
5-20%
0
<5%
16

Age Distribution

Common Weaknesses (CWE)

1
XSS
27
2
CSRF
12
3
Infoleak
2
4
Malicious File Upload
2
5
SSRF
1

Most Affected Products

1. royal-elementor-addons Royal Elementor Addons Wordpress58
2. WP Royal Royal Elementor Addons5
3. WordPress Royal Elementor Addons4
4. Royal Elementor Elementor Addons and Templates3
5. Royal Elementor Addons and Templates3

Recent Vulnerabilities

See more →
CVE-2025-5338
CVSS 6.4EPSS 0%medium

Royal Elementor Addons <= 1.7.1028 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets

Jun 26, 2025
CVE-2025-3813
CVSS 6.4medium

Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scripting

May 31, 2025🔧 No Patch
CVE-2025-39361
CVSS 6.5EPSS 0%medium

WordPress Royal Elementor Addons plugin <= 1.7.1017 - Cross Site Scripting (XSS) vulnerability

May 7, 2025
CVE-2024-12120
CVSS 5.4medium

Royal Elementor Addons and Templates <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting

May 7, 2025
CVE-2025-26990
CVSS 4.9medium

WordPress Royal Elementor Addons plugin <= 1.7.1006 - Server Side Request Forgery (SSRF) vulnerability

Apr 15, 2025
CVE-2025-1456
CVSS 6.4medium

Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting

Apr 12, 2025
CVE-2025-1455
CVSS 6.4medium

Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scripting

Apr 12, 2025
CVE-2025-1441
CVSS 8.8high

Royal Elementor Addons and Templates <= 1.7.1007 - Cross-Site Request Forgery to Reflected Cross-Site Scripting

Feb 19, 2025🔧 No Patch
CVE-2025-0393
CVSS 6.1EPSS 0%medium

Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scripting

Jan 14, 2025
CVE-2024-56062
CVSS 6.5medium

WordPress Royal Elementor Addons and Templates plugin <= 1.3.987 - Cross Site Scripting (XSS) vulnerability

Dec 31, 2024

Monitor royal-elementor-addons in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

royal-elementor-addons Security Vulnerabilities & Risk Score | 59 CVEs | SecAlerts - SecAlerts