CVE-2025-11363 — Royal Elementor Addons and Templates < 1.7.1037 - Unauthenticated Media File Upload
The Royal Addons for Elementor WordPress plugin before 1.7.1037 does not have proper authorisation, allowing unauthenticated users to upload media files via the wpr_addons_uplo…
Published: 2025-12-15 · CVSS: 5.3 · CVSS 3.1
The Royal Addons for Elementor WordPress plugin before 1.7.1037 does not have proper authorisation, allowing unauthenticated users to upload media files via the wpr_addons_upload_file action.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7