Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Royal Elementor Addons (Elementor Templates, Post Grid, Mega Menu & Header Footer Builder, WooCommerce Builder, Product Grid, Slider, Parallax Image & other Free Elementor Widgets) 1.3.56 Clear all filters
TI-2022-03750 CVE-2022-4102 · GHSA-c2vp-w3g2-v2m5

Royal Elementor Addons < 1.3.56 - Subscriber+ Arbitrary Post Deletion

Priority MEDIUM 48

The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorization and CSRF checks when deleting a template and does not ensure that the post to be deleted is a template.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00254 Published 2023-01-09 Fixed in 1.3.56 CWE-352
TI-2022-03751 CVE-2022-4103 · GHSA-p4g3-f45p-rr3m

Royal Elementor Addons < 1.3.56 - Subscriber+ Arbitrary Post Creation

Priority MEDIUM 53

The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorisation and CSRF checks when creating a template, and does not ensure that the post created is a template.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00265 Published 2023-01-09 Fixed in 1.3.56 CWE-352