CVE-2026-13406

CVE-2026-13406 affects the Royal Addons for Elementor WordPress plugin in versions before 1.7.1066 . The root cause is the absence of any capability or nonce check before the plugin returns taxonomy term data for a caller-supplied taxonomy. This allows unauthenticated users to disclose the names ...

WordPress Royal Addons for Elementor plugin < 1.7.1066 - Unauthenticated Taxonomy Term Disclosure vulnerability

Unauthenticated Taxonomy Term Disclosure vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin Royal Elementor Addons versions 1.7.1066...