medium5.3
CVE-2025-11363
The Royal Addons for Elementor WordPress plugin before 1.7.1037 does not have proper authorisation, allowing unauthenticated users to upload media files via th…
Impact
The Royal Addons for Elementor WordPress plugin before 1.7.1037 does not have proper authorisation, allowing unauthenticated users to upload media files via the wpr_addons_upload_file action.
Affected products
| Product | Affected versions |
|---|---|
| Royal Addons For Elementor WordPress Plugin | before 1.7.1037 |
Versions were read from the advisory text. No structured product data has been published for this record yet.