CVE-2026-119519: WordPress Royal Elementor Addons plugin <= 1.7.1068 - Broken Access Control vulnerability
Missing Authorization vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Royal Elementor Addons: from n/a through 1.7.1068.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Royal Elementor Addonsto a version that resolves this vulnerability.Fixed in 1.7.1069
Event History
Frequently Asked Questions
Which installations are affected?
Royal Elementor Addons versions through 1.7.1068 are affected. The available data does not identify a lower bound or exclude any particular configuration.
What access does an attacker need to exploit this issue?
The issue is described as missing authorization and incorrectly configured access-control levels. The available data does not state whether an attacker must be authenticated or what privileges are required.