PT-2026-60725 · WordPress · Royal Elementor Addons
CVE-2026-13402
·
Published
2026-06-26
·
Updated
2026-07-17
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Royal Addons for Elementor versions prior to 1.7.1063
Description
An issue exists in a REST endpoint where the post status of menu items and their referenced templates is not verified. This allows unauthenticated users to retrieve the rendered HTML content of private or draft Elementor templates that are linked from non-public navigation menu items.
Recommendations
Update Royal Addons for Elementor to version 1.7.1063 or later.
Exploit
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Royal Elementor Addons