Latest vulnerabilities for vendor "wproyal"

Where

Sort:

Software

wproyal royal elementor addons

wproyal ashe (wordpress theme)

wproyal ashe wordpress theme

wproyal bard (wordpress theme)

WProyal Royal Elementor AddonsWordPress Royal Elementor Addons plugin <= 1.7.1068 - Arbitrary Code Execution vulnerability

Risk 58

Severity

7.6

Code Injection

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Code Injection.This issue affects Royal Elementor Addons: from n/a through 1.7.1068.

First published (updated )

CVE-2026-111851

WProyal Royal Elementor AddonsWordPress Royal Elementor Addons plugin < 1.7.1053 - Broken Access Control vulnerability

Risk 27

Severity

5.3

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Missing Authorization vulnerability in WProyal Royal Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Royal Elementor Addons: from n/a before 1.7.1053.

Remedy

Update the WordPress Royal Elementor Addons Plugin to the latest available version (at least 1.7.1053).

First published (updated )

CVE-2026-25436

WProyal Royal Elementor AddonsWordPress Royal Elementor Addons plugin < 1.7.1053 - Cross Site Scripting (XSS) vulnerability

Risk 46

Severity

6.5

XSS

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal Elementor Addons allows Stored XSS.

This issue affects Royal Elementor Addons: from n/a before 1.7.1053.

Remedy

Update the WordPress Royal Elementor Addons Plugin to the latest available version (at least 1.7.1053).

First published (updated )

CVE-2026-27421

wpRoyal Ashe WordPress themeWordPress Ashe theme <= 2.266 - Broken Access Control vulnerability

Risk 22

Severity

4.3

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Missing Authorization vulnerability in wproyal Ashe ashe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ashe: from n/a through <= 2.266.

First published (updated )

CVE-2026-39627

WProyal Royal Elementor AddonsWordPress Royal Elementor Addons plugin <= 1.7.1017 - Cross Site Scripting (XSS) vulnerability

Risk 25

Severity

6.5

EPSS

0.03%

XSS

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Stored XSS.This issue affects Royal Elementor Addons: from n/a through <= 1.7.1017.

Remedy

Update the WordPress Royal Elementor Addons plugin to the latest available version (at least 1.7.1018).

First published (updated )

CVE-2025-39361

WPRoyal Ashe (WordPress theme)WordPress Ashe theme <= 2.233 - Cross Site Request Forgery (CSRF) vulnerability

Risk 20

Severity

4.3

CSRF

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in wproyal Ashe ashe allows Cross Site Request Forgery.This issue affects Ashe: from n/a through <= 2.233.

Remedy

Update the WordPress Ashe theme to the latest available version (at least 2.234).

First published (updated )

CVE-2024-37478

WPRoyal Bard (WordPress theme)WordPress Bard theme <= 2.210 - Cross Site Request Forgery (CSRF) vulnerability

Risk 20

Severity

4.3

CSRF

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in wproyal Bard bard allows Cross Site Request Forgery.This issue affects Bard: from n/a through <= 2.210.

Remedy

Update the WordPress Bard theme to the latest available version (at least 2.211).

First published (updated )

CVE-2024-37490

Trending

Vendor Risk Score

Software

WProyal Royal Elementor AddonsWordPress Royal Elementor Addons plugin <= 1.7.1068 - Arbitrary Code Execution vulnerability

WProyal Royal Elementor AddonsWordPress Royal Elementor Addons plugin < 1.7.1053 - Broken Access Control vulnerability

Remedy

WProyal Royal Elementor AddonsWordPress Royal Elementor Addons plugin < 1.7.1053 - Cross Site Scripting (XSS) vulnerability

Remedy

wpRoyal Ashe WordPress themeWordPress Ashe theme <= 2.266 - Broken Access Control vulnerability

WProyal Royal Elementor AddonsWordPress Royal Elementor Addons plugin <= 1.7.1017 - Cross Site Scripting (XSS) vulnerability

Remedy

WPRoyal Ashe (WordPress theme)WordPress Ashe theme <= 2.233 - Cross Site Request Forgery (CSRF) vulnerability

Remedy

WPRoyal Bard (WordPress theme)WordPress Bard theme <= 2.210 - Cross Site Request Forgery (CSRF) vulnerability

Remedy

Company

Resources

Contact