MEDIUM 5.3 NVD
CVE-2026-17585
The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up
The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.1066 via the 'wpr_keyword' parameter. This makes it possible for unauthenticated attackers to extract arbitrary postmeta values from all published posts via character-by-character substring matching across the entire wp_postmeta table. The required nonce is emitted publicly via wp_localize_script on any frontend page that loads a Royal Elementor widget, meaning no authenticated session or prior action is needed to obtain it.
References
- https://plugins.trac.wordpress.org/browser/royal-elementor-addons/tags/1.7.1061/classes/mo
- https://plugins.trac.wordpress.org/browser/royal-elementor-addons/tags/1.7.1061/classes/mo
- https://plugins.trac.wordpress.org/browser/royal-elementor-addons/tags/1.7.1061/classes/mo
- https://plugins.trac.wordpress.org/browser/royal-elementor-addons/tags/1.7.1061/plugin.php
- https://plugins.trac.wordpress.org/browser/royal-elementor-addons/tags/1.7.1064/classes/mo
This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-09-12 via NVD.
vulnfeed aggregates 12854 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.