Royal Addons for Elementor – Addons and Templates Kit for Elementor vulnerabilities
Plugin slug royal-elementor-addons · 101 known vulnerabilities · latest disclosed 2026-11-06 · WordPress.org page
Every listed vulnerability has a fix. Version 1.7.1070 or later is not affected by any of them. If your site runs an older version, update it.
13 of 101 rated high or critical (CVSS 7 or more).
Known vulnerabilities in Royal Addons for Elementor – Addons and Templates Kit for Elementor
| Severity | Affected versions | Fixed in | CVE | Published | Details |
|---|---|---|---|---|---|
| Medium 4.3 | <= 1.7.1068 | 1.7.1069 | CVE-2026-119519 | 2026-11-06 | Advisory |
| Medium 6.4 | 1.7.1037 to 1.7.1069 | 1.7.1070 | CVE-2026-107098 | 2026-10-28 | Advisory |
| Medium 5.3 | 1.3.71 to 1.7.1069 | 1.7.1070 | CVE-2026-107097 | 2026-10-28 | Advisory |
| Medium 5.3 | 1.3.81 to 1.7.1069 | 1.7.1070 | CVE-2026-107100 | 2026-10-28 | Advisory |
| Medium 4.3 | 1.3.68 to 1.7.1069 | 1.7.1070 | CVE-2026-106647 | 2026-10-28 | Advisory |
| Medium 5.3 | <= 1.7.1069 | 1.7.1070 | CVE-2026-97255 | 2026-10-26 | Advisory |
| Medium 6.4 | <= 1.7.1069 | 1.7.1070 | CVE-2026-97254 | 2026-10-26 | Advisory |
| Medium 6.4 | <= 1.7.1069 | 1.7.1070 | CVE-2026-112865 | 2026-10-26 | Advisory |
| Medium 5.3 | < 1.7.1070 | 1.7.1070 | CVE-2026-106648 | 2026-10-26 | Advisory |
| High 8.8 | <= 1.7.1068 | 1.7.1069 | CVE-2026-111851 | 2026-10-20 | Advisory |
| High 7.2 | <= 1.7.1066 | 1.7.1067 | CVE-2026-13407 | 2026-09-14 | Advisory |
| Medium 5.3 | <= 1.7.1066 | 1.7.1067 | CVE-2026-17585 | 2026-09-11 | Advisory |
| Medium 5.3 | < 1.7.1066 | 1.7.1066 | CVE-2026-13406 | 2026-08-26 | Advisory |
| Medium 6.4 | < 1.7.1066 | 1.7.1066 | CVE-2026-19226 | 2026-08-26 | Advisory |
| Medium 5.3 | < 1.7.1066 | 1.7.1066 | CVE-2026-13404 | 2026-08-24 | Advisory |
| High 7.2 | < 1.7.1066 | 1.7.1066 | CVE-2026-13405 | 2026-08-21 | Advisory |
| High 8.8 | <= 1.7.1064 | 1.7.1065 | CVE-2026-17123 | 2026-08-15 | Advisory |
| Medium 6.4 | <= 1.7.1064 | 1.7.1065 | CVE-2026-19217 | 2026-08-10 | Advisory |
| Medium 5.3 | <= 1.7.1062 | 1.7.1063 | CVE-2026-13402 | 2026-06-26 | Advisory |
| Medium 6.5 | 1.7.1058 to 1.7.1059 | 1.7.1060 | CVE-2026-8118 | 2026-06-18 | Advisory |
| Medium 6.4 | <= 1.7.1058 | 1.7.1059 | CVE-2026-6504 | 2026-05-13 | Advisory |
| Medium 5.3 | < 1.7.1053 | 1.7.1053 | CVE-2026-25436 | 2026-05-07 | Advisory |
| Medium 6.4 | < 1.7.1053 | 1.7.1053 | CVE-2026-27421 | 2026-05-07 | Advisory |
| Medium 6.4 | <= 1.7.1056 | 1.7.1057 | CVE-2026-5159 | 2026-05-04 | Advisory |
| High 7.2 | <= 1.7.1056 | 1.7.1057 | CVE-2026-4803 | 2026-05-04 | Advisory |
| Medium 5.3 | <= 1.7.1056 | 1.7.1057 | CVE-2026-4024 | 2026-05-01 | Advisory |
| High 7.2 | <= 1.7.1057 | 1.7.1058 | CVE-2026-6229 | 2026-05-01 | Advisory |
| Medium 6.4 | <= 1.7.1056 | 1.7.1057 | CVE-2026-5428 | 2026-04-23 | Advisory |
| Medium 6.4 | <= 1.7.1056 | 1.7.1057 | CVE-2026-5162 | 2026-04-16 | Advisory |
| High 7.2 | < 1.7.1041 | 1.7.1041 | CVE-2026-40720 | 2026-04-16 | Advisory |
| Medium 6.4 | <= 1.7.1049 | 1.7.1050 | CVE-2026-0664 | 2026-04-03 | Advisory |
| Medium 5.3 | <= 1.7.1056 | 1.7.1057 | CVE-2026-40763 | 2026-03-31 | Advisory |
| Medium 5.3 | <= 1.7.1049 | 1.7.1050 | CVE-2026-2373 | 2026-03-16 | Advisory |
| High 8.8 | <= 1.7.1049 | 1.7.1050 | CVE-2025-13067 | 2026-03-10 | Advisory |
| Medium 5.3 | <= 1.7.1052 | 1.7.1053 | CVE-2026-28135 | 2026-02-26 | Advisory |
| Medium 5.3 | <= 1.7.1036 | 1.7.1037 | CVE-2025-11363 | 2025-11-24 | Advisory |
| Medium 6.4 | <= 1.7.1031 | 1.7.1032 | CVE-2025-5092 | 2025-11-19 | Advisory |
| Medium 6.4 | <= 1.7.1036 | 1.7.1037 | CVE-2025-6251 | 2025-11-18 | Advisory |
| Medium 6.4 | <= 1.7.1028 | 1.7.1029 | CVE-2025-5338 | 2025-06-25 | Advisory |
| Medium 6.4 | <= 1.7.1020 | 1.7.1021 | CVE-2025-3813 | 2025-05-30 | Advisory |
| Medium 6.4 | <= 1.7.1017 | 1.7.1018 | CVE-2025-39361 | 2025-05-07 | Advisory |
| Medium 5.4 | <= 1.7.1017 | 1.7.1018 | CVE-2024-12120 | 2025-05-06 | Advisory |
| Medium 6.4 | <= 1.3.977 | 1.3.979 | CVE-2025-39543 | 2025-04-16 | Advisory |
| Medium 5.5 | <= 1.7.1006 | 1.7.1007 | CVE-2025-26990 | 2025-04-11 | Advisory |
| Medium 6.4 | <= 1.7.1012 | 1.7.1013 | CVE-2025-1455 | 2025-04-11 | Advisory |
| Medium 6.4 | <= 1.7.1012 | 1.7.1013 | CVE-2025-1456 | 2025-04-11 | Advisory |
| Medium 6.1 | <= 1.7.1007 | 1.7.1008 | CVE-2025-1441 | 2025-02-18 | Advisory |
| Medium 6.1 | <= 1.7.1006 | 1.7.1007 | CVE-2025-0393 | 2025-01-13 | Advisory |
| Medium 6.1 | <= 1.7.1001 | 1.7.1002 | CVE-2024-56226 | 2024-12-19 | Advisory |
| Medium 4.3 | <= 1.7.1001 | 1.7.1002 | CVE-2024-56227 | 2024-12-19 | Advisory |
| Medium 6.4 | <= 1.3.987 | 1.7.1 | CVE-2024-56062 | 2024-12-18 | Advisory |
| Medium 4.3 | <= 1.7.1003 | 1.7.1004 | CVE-2024-10798 | 2024-11-27 | Advisory |
| Medium 6.4 | <= 1.7.1001 | 1.7.1002 | CVE-2024-9059 | 2024-11-12 | Advisory |
| Medium 6.4 | <= 1.7.1001 | 1.7.1002 | CVE-2024-9668 | 2024-11-12 | Advisory |
| Medium 6.4 | <= 1.7.1001 | 1.7.1002 | CVE-2024-9682 | 2024-11-12 | Advisory |
| Medium 5.4 | <= 1.3.980 | 1.3.981 | CVE-2024-50442 | 2024-10-24 | Advisory |
| Medium 4.3 | <= 1.3.986 | 1.3.987 | CVE-2024-7417 | 2024-10-16 | Advisory |
| Medium 6.4 | <= 1.3.986 | 1.3.987 | CVE-2024-8482 | 2024-10-07 | Advisory |
| Medium 6.4 | <= 1.3.982 | 1.3.985 | CVE-2024-44001 | 2024-08-29 | Advisory |
| Medium 6.4 | <= 1.3.980 | 1.3.981 | CVE-2024-5818 | 2024-07-23 | Advisory |
| Medium 6.4 | <= 1.3.976 | 1.3.977 | CVE-2024-4489 | 2024-06-06 | Advisory |
| Medium 6.4 | <= 1.3.976 | 1.3.977 | CVE-2024-4488 | 2024-06-06 | Advisory |
| Medium 6.4 | <= 1.3.975 | 1.3.976 | CVE-2024-4087 | 2024-05-31 | Advisory |
| Medium 6.4 | <= 1.3.975 | 1.3.976 | CVE-2024-4342 | 2024-05-31 | Advisory |
| Medium 5.4 | <= 1.3.974 | 1.3.975 | CVE-2024-3887 | 2024-05-15 | Advisory |
| Medium 5.3 | <= 1.3.93 | 1.3.95 | CVE-2024-32786 | 2024-04-22 | Advisory |
| Medium 6.4 | <= 1.3.971 | 1.3.972 | CVE-2024-3675 | 2024-04-22 | Advisory |
| Medium 6.4 | <= 1.3.971 | 1.3.972 | CVE-2024-2799 | 2024-04-22 | Advisory |
| Medium 6.4 | <= 1.3.971 | 1.3.972 | CVE-2024-2798 | 2024-04-22 | Advisory |
| Medium 6.4 | <= 1.3.971 | 1.3.972 | CVE-2024-3889 | 2024-04-22 | Advisory |
| High 8.2 | <= 1.3.94 | 1.3.95 | CVE-2024-1567 | 2024-04-19 | Advisory |
| Medium 6.4 | <= 1.3.93 | 1.3.95 | CVE-2024-31236 | 2024-04-05 | Advisory |
| Medium 5.4 | <= 1.3.91 | 1.3.92 | CVE-2024-1500 | 2024-03-06 | Advisory |
| Medium 6.4 | <= 1.3.87 | 1.3.88 | CVE-2024-0442 | 2024-02-08 | Advisory |
| Medium 4.3 | <= 1.3.87 | 1.3.88 | CVE-2024-0513 | 2024-02-07 | Advisory |
| Medium 4.3 | <= 1.3.87 | 1.3.88 | CVE-2024-0515 | 2024-02-07 | Advisory |
| Medium 4.3 | <= 1.3.87 | 1.3.88 | CVE-2024-0514 | 2024-02-07 | Advisory |
| Medium 4.3 | <= 1.3.87 | 1.3.88 | CVE-2024-0512 | 2024-02-07 | Advisory |
| Medium 5.3 | <= 1.3.87 | 1.3.88 | CVE-2024-0516 | 2024-02-07 | Advisory |
| Medium 4.3 | <= 1.3.87 | 1.3.88 | CVE-2024-0511 | 2024-02-07 | Advisory |
| Medium 5.3 | <= 1.3.80 | 1.3.81 | CVE-2023-5922 | 2023-12-06 | Advisory |
| Critical 9.8 | <= 1.3.78 | 1.3.79 | CVE-2023-5360 | 2023-10-09 | Advisory |
| Medium 4.3 | <= 1.3.75 | 1.3.76 | CVE-2022-47175 | 2023-08-22 | Advisory |
| Medium 6.1 | 1.3 to 1.3.70 | 1.3.71 | CVE-2023-33999 | 2023-07-18 | Advisory |
| Medium 5.3 | <= 1.3.70 | 1.3.71 | CVE-2023-3709 | 2023-07-17 | Advisory |
| Medium 4.3 | <= 1.3.59 | 1.3.60 | CVE-2022-4705 | 2023-01-10 | Advisory |
| Medium 4.3 | <= 1.3.59 | 1.3.60 | CVE-2022-4707 | 2023-01-10 | Advisory |
| Medium 4.3 | <= 1.3.59 | 1.3.60 | CVE-2022-4701 | 2023-01-10 | Advisory |
| Medium 4.3 | <= 1.3.59 | 1.3.60 | CVE-2022-4703 | 2023-01-10 | Advisory |
| Medium 5.4 | <= 1.3.59 | 1.3.60 | CVE-2022-4704 | 2023-01-10 | Advisory |
| Medium 6.1 | <= 1.3.59 | 1.3.60 | CVE-2022-4710 | 2023-01-10 | Advisory |
| Medium 4.3 | <= 1.3.59 | 1.3.60 | CVE-2022-4708 | 2023-01-10 | Advisory |
| Medium 4.3 | <= 1.3.59 | 1.3.60 | CVE-2022-4711 | 2023-01-10 | Advisory |
| Medium 5.4 | <= 1.3.59 | 1.3.60 | CVE-2022-4702 | 2023-01-10 | Advisory |
| Medium 5.4 | <= 1.3.59 | 1.3.60 | CVE-2022-4700 | 2023-01-10 | Advisory |
| Medium 4.3 | <= 1.3.59 | 1.3.60 | CVE-2022-4709 | 2023-01-10 | Advisory |
| High 8.1 | <= 1.3.55 | 1.3.56 | CVE-2022-4102 | 2022-12-15 | Advisory |
| High 8.1 | <= 1.3.55 | 1.3.56 | CVE-2022-4102 | 2022-12-15 | Advisory |
| Medium 6.5 | <= 1.3.55 | 1.3.56 | CVE-2022-4103 | 2022-12-15 | Advisory |
| High 8.8 | <= 1.3.55 | 1.3.56 | none | 2022-12-06 | Advisory |
| Medium 6.3 | < 1.3.33 | 1.3.33 | CVE-2022-4974 | 2022-03-04 | Advisory |
Check if a site is affected
Enter a site address to see which version of Royal Addons for Elementor – Addons and Templates Kit for Elementor and other plugins it runs, and whether they match a known vulnerability.
Questions
Is the Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin safe to use?
All 101 known issues are fixed in current versions (1.7.1070 or later). Keeping it updated is what matters.
How do I check which version of Royal Addons for Elementor – Addons and Templates Kit for Elementor my site runs?
In WordPress go to Plugins > Installed Plugins. From the outside, the free PluginPeek scan below reads the version from the site's public files.
How do I fix a vulnerable plugin?
Make a full backup, then update it from Dashboard > Updates and check the site afterwards. If you would rather not, we can do it for a fixed $99, paid after you have checked the site.
Check any WordPress site in one click while you browse: Add PluginPeek to Chrome