Now officially on WordPress.org

CVE Database / CVE-2026-40763

CVE · Medium

CVE-2026-40763 — Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons] < 1.7.1057

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-40763 Royal Addons for Elementor – Addons and Templates Kit for Elementor [royal-elementor-addons] < 1.7.1057 — Medium 5.3 < 1.7.1057 1.7.1057 2026-03-31 —

CVE-2026-40763

A security flaw exists within the Royal Elementor Addons plugin for WordPress, allowing unverified users to bypass necessary permissions checks when accessing certain functions. The vulnerability is present in versions of the plugin up through 1.7.1056. This oversight enables malicious actors to execute unauthorized actions without proper authentication.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings