Now officially on WordPress.org

CVE Database / CVE-2022-4703

CVE · High

CVE-2022-4703 — Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons] < 1.3.60

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2022-4703 Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons] < 1.3.60 Improper Access Control High 8.1 < 1.3.60 1.3.60 2023-01-10 —

CVE-2022-4703

The Royal Addons for Elementor plugin through version 1.3.59 contains an access control flaw in the 'wpr_reset_previous_import' AJAX function that permits any logged-in user, even those with minimal subscriber privileges, to reset previously imported data. This vulnerability stems from insufficient permission checks on a sensitive administrative operation. The flaw was corrected in version 1.3.60 and later.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings