Royal Addons for Elementor — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in Royal Addons for Elementor, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE ID	Title	CVSS	Severity	Published
CVE-2026-13407	Royal Elementor Addons < 1.7.1067 - Unauthenticated Stored HTML Injection in Form Notification Emails	6.1	Medium	2026-09-16
CVE-2026-19226	Royal Elementor Addons < 1.7.1066 - Contributor+ Stored XSS via Image Accordion Widget Effect Settings	-	-	2026-08-26
CVE-2026-13404	Royal Elementor Addons < 1.7.1066 - Unauthenticated Like Count and IP Meta Modification via wpr_likes_init	-	-	2026-08-26
CVE-2026-13406	Royal Elementor Addons < 1.7.1066 - Unauthenticated Taxonomy Term Disclosure	-	-	2026-08-26
CVE-2026-13405	Royal Elementor Addons < 1.7.1066 - Admin+ Remote Code Execution via Widget Builder	-	-	2026-08-20
CVE-2026-19217	Royal Elementor Addons < 1.7.1065 - Contributor+ Stored XSS via Icon Box Widget	-	-	2026-08-12
CVE-2026-13402	Royal Elementor Addons < 1.7.1063 - Unauthenticated Private Mega Menu Template Disclosure	-	-	2026-07-17
CVE-2025-11363	Royal Elementor Addons and Templates < 1.7.1037 - Unauthenticated Media File Upload	7.5^AI	High ^AI	2025-12-15

All 8 known CVE vulnerabilities affecting Royal Addons for Elementor with full Chinese analysis, references, and POCs where available.