CVE-2026-106647 Royal Elementor Addons 1.3.68 - 1.7.1069 - Author+ Form Submission Interception via Widget ID Collision

The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not scope a contact form's email delivery configuration to the form's own document or owner, instead storing it in a site-global namespace keyed only on a non-secret, author-chosen identifier that is exposed in public page sourc...

WordPress Royal Addons for Elementor plugin 1.3.68-1.7.1069 - Author+ Form Submission Interception vulnerability

Author+ Form Submission Interception vulnerability discovered by Mohammed Abd Alrahman in WordPress Plugin Royal Elementor Addons versions 1.3.68-1.7.1069...