CVE-2026-107097: Royal Elementor Addons 1.3.71 - 1.7.1069 - Unauthenticated Mailchimp Audience Injection via mailchimp_subscribe

Q: Who can exploit this issue?

Any unauthenticated remote attacker can exploit it. The affected plugin uses the site owner's stored Mailchimp credential without an authorization check.

Q: What does an attacker need to do to abuse it?

The attacker needs to submit a request to the mailchimp_subscribe functionality and choose a Mailchimp audience. They can inject arbitrary email addresses and contact details as confirmed subscribers.

Q: Which installations are affected?

Installations running Royal Addons for Elementor before version 1.7.1070 are affected, provided the plugin has access to the site owner's stored Mailchimp credential.

Q: How can I remediate the issue?

Update Royal Addons for Elementor to version 1.7.1070 or later. If updating cannot happen immediately, prevent access to the vulnerable Mailchimp subscription functionality and review Mailchimp audiences for unauthorized confirmed subscriber records.

Published Oct 28, 2026

Updated

The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not perform any authorization check before using the site owner's stored Mailchimp credential to add subscriber records to an audience chosen by the request, allowing unauthenticated attackers to inject arbitrary email addresses and contact details into the site owner's Mailchimp account as confirmed subscribers.

Affected Software

1 affected component

WP Royal Royal Addons for Elementor<1.7.1070

Event History

Oct 28, 2026

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Frequently Asked Questions

Who can exploit this issue?

Any unauthenticated remote attacker can exploit it. The affected plugin uses the site owner's stored Mailchimp credential without an authorization check.

What does an attacker need to do to abuse it?

The attacker needs to submit a request to the mailchimp_subscribe functionality and choose a Mailchimp audience. They can inject arbitrary email addresses and contact details as confirmed subscribers.

Which installations are affected?

Installations running Royal Addons for Elementor before version 1.7.1070 are affected, provided the plugin has access to the site owner's stored Mailchimp credential.

How can I remediate the issue?

Update Royal Addons for Elementor to version 1.7.1070 or later. If updating cannot happen immediately, prevent access to the vulnerable Mailchimp subscription functionality and review Mailchimp audiences for unauthorized confirmed subscriber records.

CVE-2026-107097: Royal Elementor Addons 1.3.71 - 1.7.1069 - Unauthenticated Mailchimp Audience Injection via mailchimp_subscribe

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What does an attacker need to do to abuse it?

Which installations are affected?

How can I remediate the issue?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What does an attacker need to do to abuse it?

Which installations are affected?

How can I remediate the issue?