Royal Elementor Addons and Templates, CVE-2025-11363

CVE, Research URL: CVE-2025-11363
Home page URL: Security reports for Royal Elementor Addons and Templates
Application: Royal Elementor Addons and Templates
Published on: Dec 15, 2025
Research Description: The Royal Addons for Elementor WordPress plugin before 1.7.1037 does not have proper authorisation, allowing unauthenticated users to upload media files via the wpr_addons_upload_file action.
Affected versions: max 1.7.1037.
Status: vulnerable