CVE-2026-28135: WordPress Royal Elementor Addons plugin <= 1.7.1052 - Other vulnerability Type vulnerability
Inclusion of Functionality from Untrusted Control Sphere vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Royal Elementor Addons: from n/a through <= 1.7.1052.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-28135?
The severity of CVE-2026-28135 is considered to be of medium impact due to its potential to allow unauthorized access to functionality.
How do I fix CVE-2026-28135?
To fix CVE-2026-28135, update the WordPress Royal Elementor Addons plugin to a version higher than 1.7.1049.
What functionality is affected by CVE-2026-28135?
CVE-2026-28135 affects the access control for certain functionalities within the Royal Elementor Addons plugin.
Are older versions of the Royal Elementor Addons plugin vulnerable to CVE-2026-28135?
Yes, any version of the Royal Elementor Addons plugin that is 1.7.1049 or lower is vulnerable to CVE-2026-28135.
What should I do if I am using the vulnerable version of the Royal Elementor Addons plugin?
If you are using the vulnerable version, immediately update the plugin to the latest version to mitigate risks associated with CVE-2026-28135.