PT-2026-23405
CVE-2026-28135
·
Published
2026-02-26
·
Updated
2026-04-06
Description by
CVSS 3.1
8.2
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Name of the Vulnerable Software and Affected Versions
WP Royal Royal Elementor Addons versions through 1.7.1049
Description
The software contains a flaw related to the inclusion of functionality from an untrusted control sphere, potentially allowing access to functionality not properly constrained by access control lists (ACLs).
Recommendations
Update WP Royal Royal Elementor Addons to a version later than 1.7.1049.
Found an issue in the description? Have something to add? Feel free to write us 👾