Lucene search

CVE-2022-4704

🗓️ 10 Jan 2023 17:11:15Reported by WordfenceType

The Royal Elementor Addons plugin for WordPress vulnerability in 'wpr_import_templates_kit' AJAX action

Reporter	Title	Published	Views	Family All 14
Vulnrichment	CVE-2022-4704	10 Jan 202316:55	–	vulnrichment
Vulnrichment	CVE-2022-4705	10 Jan 202316:55	–	vulnrichment
Patchstack	WordPress Royal Elementor Addons Plugin <= 1.3.59 is vulnerable to Broken Access Control	10 Jan 202300:00	–	patchstack
Cvelist	CVE-2022-4704	10 Jan 202316:55	–	cvelist
Cvelist	CVE-2022-4705	10 Jan 202316:55	–	cvelist
NVD	CVE-2022-4704	10 Jan 202317:15	–	nvd
NVD	CVE-2022-4705	10 Jan 202317:15	–	nvd
Prion	Improper access control	10 Jan 202317:15	–	prion
Prion	Improper access control	10 Jan 202317:15	–	prion
WPVulnDB	Royal Elementor Addons < 1.3.60 - Subscriber+ Arbitrary Template Import	10 Jan 202300:00	–	wpvulndb

Nvd

Vulners

Node

royal-elementor-addons royal_elementor_addonsRange≤1.3.59wordpress

[
  {
    "vendor": "wproyal",
    "product": "Royal Elementor Addons (Elementor Templates, Post Grid, Mega Menu & Header Footer Builder, WooCommerce Builder, Product Grid, Slider, Parallax Image & other Free Elementor Widgets)",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.3.59",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/64cce528-0ad0-45ec-a8f6-e8791b0bece0
plugins	www.plugins.trac.wordpress.org/browser/royal-elementor-addons/trunk/admin/templates-kit.php
wordfence	www.wordfence.com/blog/2023/01/eleven-vulnerabilities-patched-in-royal-elementor-addons/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Jan 2023 17:15Current

5.7Medium risk

Vulners AI Score5.7

CVSS35.4 - 8.1

EPSS0.00092

SSVC