8.8
Élevée
CVE-2025-13067 The Royal Addons for Elementor plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and…
Description
The Royal Addons for Elementor plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 1.7.1049. This is due to insufficient file type validation detecting files named main.php, allowing a file with such a name to bypass sanitization. This makes it possible for authenticated attackers, with author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7 | premières → 1.7.1049 | Pas de correctif indiqué |
Références
- www.wordfence.com www.wordfence.com
- plugins.trac.wordpress.org plugins.trac.wordpress.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Royal Addons for Elementor – Addons and Templates Kit for Elementor
Les 60 CVE de Royal Addons for Elementor – Addons and Templates Kit for Elementor →
CVE-2026-17585
The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to…
5.3
Moyenne
CVE-2026-17123
The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and…
8.8
Élevée
CVE-2026-8118
The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to…
6.5
Moyenne
CVE-2026-6504
The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
6.4
Moyenne