CVE-2025-11363: Royal Elementor Addons and Templates < 1.7.1037 - Unauthenticated Media File Upload
The Royal Addons for Elementor WordPress plugin before 1.7.1037 does not have proper authorisation, allowing unauthenticated users to upload media files via the wpraddonsuploadfile action.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11363?
CVE-2025-11363 has a high severity rating due to the risk of file uploads by unauthenticated users, potentially leading to exploitation.
How do I fix CVE-2025-11363?
To fix CVE-2025-11363, update the Royal Addons for Elementor WordPress plugin to version 1.7.1037 or later.
What types of attacks can CVE-2025-11363 facilitate?
CVE-2025-11363 can facilitate attacks such as file upload vulnerabilities that may lead to remote code execution.
Which version of the Royal Addons for Elementor is affected by CVE-2025-11363?
Versions of the Royal Addons for Elementor plugin before 1.7.1037 are affected by CVE-2025-11363.
Who is at risk due to CVE-2025-11363?
Users of the Royal Addons for Elementor plugin on WordPress who have not updated to version 1.7.1037 or later are at risk due to CVE-2025-11363.