CVE Database /
CVE-2022-4707
CVE · Medium
CVE-2022-4707 — Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons] < 1.3.60
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-4707
|
Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons] < 1.3.60 |
Cross-Site Request Forgery (CSRF) |
Medium
6.5
|
< 1.3.60
|
1.3.60 |
2023-01-10 |
—
|
CVE-2022-4707
The Royal Elementor Addons plugin contained a cross-site request forgery vulnerability that allowed attackers to trick authenticated users with higher privileges into performing unintended actions, such as changing passwords that would grant the attacker admin access. This flaw was remedied in version 1.3.60 and affected all earlier releases of the plugin.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings