CVE-2026-2373

Name of the Vulnerable Software and Affected Versions Royal Addons for Elementor – Addons and Templates Kit for Elementor versions prior to 1.7.1049

Description The Royal Addons for Elementor plugin for WordPress is susceptible to Information Exposure due to insufficient restrictions on post inclusion within the get main query args() function. This allows unauthenticated attackers to extract contents from non-public custom post types, including Contact Form 7 submissions and WooCommerce coupons.

Recommendations Update Royal Addons for Elementor – Addons and Templates Kit for Elementor to version 1.7.1049 or later.