CVE-2022-4701 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpractivaterequiredplugins' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the...

CVE-2022-4701 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpractivaterequiredplugins' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the...

CVE-2022-4701

The CVE-2022-4701 entry concerns the WordPress plugin Royal Elementor Addons. Affected: versions up to and including 1.3.59. Root cause: insufficient access control in the wpr_activate_required_plugins AJAX action, enabling any authenticated user (including subscriber-level) to activate certain i...

CVE-2022-4703 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wprresetpreviousimport' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to reset previously imported da...

CVE-2022-4703 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wprresetpreviousimport' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to reset previously imported da...

CVE-2022-4703

CVE-2022-4703 affects the WordPress plugin Royal Elementor Addons. Affected versions are up to and including 1.3.59, where insufficient access control in the wpr_reset_previous_import AJAX action allows any authenticated user (including subscribers) to reset previously imported data. The vulnerab...

CVE-2022-4705 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Activation

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wprfinalsettingssetup' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to finalize activation of preset...

CVE-2022-4705

The CVE-2022-4705 entry concerns the WordPress plugin Royal Elementor Addons. Affected component: the wpr_final_settings_setup AJAX action (versions up to and including 1.3.59). Root cause: insufficient access control allowing any authenticated user (including subscribers) to finalize activation ...

CVE-2022-4704 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wprimporttemplateskit' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to import preset site...

CVE-2022-4704

Summary of confirmed details: The Royal Elementor Addons plugin for WordPress is vulnerable via the wpr_import_templates_kit AJAX action, with affected versions up to and including 1.3.59. The issue is insufficient access control, allowing any authenticated user (including subscriber-level) to im...

CVE-2022-4710

The CVE-2022-4710 entry concerns the WordPress plugin Royal Elementor Addons (versions up to 1.3.59). The issue is a Reflected Cross-Site Scripting vulnerability in the wpr_ajax_search_link_target parameter within the data_fetch function, caused by insufficient input sanitization/output escaping....

CVE-2022-4710 Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scripting

The Royal Elementor Addons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.3.59, due to due to insufficient input sanitization and output escaping of the 'wprajaxsearchlinktarget' parameter in the 'datafetch' function. This makes it possibl...

CVE-2022-4708

CVE-2022-4708 affects the WordPress plugin Royal Elementor Addons. The vulnerability is an insufficient access control in the AJAX action wpr_save_template_conditions , impacting versions up to and including 1.3.59 . This allows any authenticated user (including subscribers) to modify the conditi...

CVE-2022-4708 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modification

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wprsavetemplateconditions' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to modify the conditions und...

CVE-2022-4711 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings Update

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wprsavemegamenusettings' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to enable and modify Mega Menu...

CVE-2022-4711

CVE-2022-4711 affects the WordPress plugin Royal Elementor Addons (versions up to 1.3.59). The issue is insufficient access control in the wpr_save_mega_menu_settings AJAX action, enabling any authenticated user (including subscribers) to enable/modify Mega Menu settings for any menu item. Remedi...

CVE-2022-4702

CVE-2022-4702 affects the WordPress plugin Royal Elementor Addons (versions

CVE-2022-4700 Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpractivaterequiredtheme' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the...

CVE-2022-4700

The CVE-2022-4700 entry concerns the WordPress plugin Royal Elementor Addons. Affected versions are up to and including 1.3.59, where an insufficient access-control flaw in the wpr_activate_required_theme AJAX action allows any authenticated user (including subscribers) to activate the royal-elem...

CVE-2022-4709

The CVE-2022-4709 entry concerns the WordPress plugin Royal Elementor Addons. Affected versions up to and including 1.3.59 expose insufficient access control in the wpr_import_library_template AJAX action, allowing any authenticated user, including subscribers, to import and activate templates fr...