Vulnerabilities > CVE-2024-10798 - Authorization Bypass Through User-Controlled Key vulnerability in Royal-Elementor-Addons Royal Elementor Addons

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

royal-elementor-addons

CWE-639

NVD

Published: 2024-11-28

Updated: 2025-03-04

Summary

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.7.1003 via the 'wpr-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created via Elementor that they should not have access to.

Vulnerable Configurations

Part	Description	Count
Application	Royal-Elementor-Addons Royal Elementor Addons Royal Elementor Addons - Royal Elementor Addons Royal Elementor Addons 1.0 Royal Elementor Addons Royal Elementor Addons 1.2 Royal Elementor Addons Royal Elementor Addons 1.3 Royal Elementor Addons Royal Elementor Addons 1.3.2 Royal Elementor Addons Royal Elementor Addons 1.3.21 Royal Elementor Addons Royal Elementor Addons 1.3.22 Royal Elementor Addons Royal Elementor Addons 1.3.23 Royal Elementor Addons Royal Elementor Addons 1.3.25 Royal Elementor Addons Royal Elementor Addons 1.3.26 Royal Elementor Addons Royal Elementor Addons 1.3.27 Royal Elementor Addons Royal Elementor Addons 1.3.28 Royal Elementor Addons Royal Elementor Addons 1.3.29 Royal Elementor Addons Royal Elementor Addons 1.3.30 Royal Elementor Addons Royal Elementor Addons 1.3.32 Royal Elementor Addons Royal Elementor Addons 1.3.33 Royal Elementor Addons Royal Elementor Addons 1.3.34 Royal Elementor Addons Royal Elementor Addons 1.3.36 Royal Elementor Addons Royal Elementor Addons 1.3.37 Royal Elementor Addons Royal Elementor Addons 1.3.38 Royal Elementor Addons Royal Elementor Addons 1.3.39 Royal Elementor Addons Royal Elementor Addons 1.3.40 Royal Elementor Addons Royal Elementor Addons 1.3.42 Royal Elementor Addons Royal Elementor Addons 1.3.43 Royal Elementor Addons Royal Elementor Addons 1.3.44 Royal Elementor Addons Royal Elementor Addons 1.3.45 Royal Elementor Addons Royal Elementor Addons 1.3.46 Royal Elementor Addons Royal Elementor Addons 1.3.47 Royal Elementor Addons Royal Elementor Addons 1.3.48 Royal Elementor Addons Royal Elementor Addons 1.3.49 Royal Elementor Addons Royal Elementor Addons 1.3.50 Royal Elementor Addons Royal Elementor Addons 1.3.51 Royal Elementor Addons Royal Elementor Addons 1.3.56 Royal Elementor Addons Royal Elementor Addons 1.3.58 Royal Elementor Addons Royal Elementor Addons 1.3.59 Royal Elementor Addons Royal Elementor Addons 1.3.60 Royal Elementor Addons Royal Elementor Addons 1.3.61 Royal Elementor Addons Royal Elementor Addons 1.3.62 Royal Elementor Addons Royal Elementor Addons 1.3.63 Royal Elementor Addons Royal Elementor Addons 1.3.64 Royal Elementor Addons Royal Elementor Addons 1.3.65 Royal Elementor Addons Royal Elementor Addons 1.3.66 Royal Elementor Addons Royal Elementor Addons 1.3.67 Royal Elementor Addons Royal Elementor Addons 1.3.68 Royal Elementor Addons Royal Elementor Addons 1.3.69 Royal Elementor Addons Royal Elementor Addons 1.3.70 Royal Elementor Addons Royal Elementor Addons 1.3.71 Royal Elementor Addons Royal Elementor Addons 1.3.75 Royal Elementor Addons Royal Elementor Addons 1.3.76 Royal Elementor Addons Royal Elementor Addons 1.3.77 Royal Elementor Addons Royal Elementor Addons 1.3.78 Royal Elementor Addons Royal Elementor Addons 1.3.79 Royal Elementor Addons Royal Elementor Addons 1.3.80 Royal Elementor Addons Royal Elementor Addons 1.3.81 Royal Elementor Addons Royal Elementor Addons 1.3.82 Royal Elementor Addons Royal Elementor Addons 1.3.83 Royal Elementor Addons Royal Elementor Addons 1.3.84 Royal Elementor Addons Royal Elementor Addons 1.3.85 Royal Elementor Addons Royal Elementor Addons 1.3.86 Royal Elementor Addons Royal Elementor Addons 1.3.87 Royal Elementor Addons Royal Elementor Addons 1.3.88 Royal Elementor Addons Royal Elementor Addons 1.3.89 Royal Elementor Addons Royal Elementor Addons 1.3.90 Royal Elementor Addons Royal Elementor Addons 1.3.91 Royal Elementor Addons Royal Elementor Addons 1.3.92 Royal Elementor Addons Royal Elementor Addons 1.3.93 Royal Elementor Addons Royal Elementor Addons 1.3.94 Royal Elementor Addons Royal Elementor Addons 1.3.95 Royal Elementor Addons Royal Elementor Addons 1.3.96 Royal Elementor Addons Royal Elementor Addons 1.3.97 Royal Elementor Addons Royal Elementor Addons 1.3.971 Royal Elementor Addons Royal Elementor Addons 1.3.972 Royal Elementor Addons Royal Elementor Addons 1.3.973 Royal Elementor Addons Royal Elementor Addons 1.3.974 Royal Elementor Addons Royal Elementor Addons 1.3.975 Royal Elementor Addons Royal Elementor Addons 1.3.976 Royal Elementor Addons Royal Elementor Addons 1.3.977 Royal Elementor Addons Royal Elementor Addons 1.3.978 Royal Elementor Addons Royal Elementor Addons 1.3.979 Royal Elementor Addons Royal Elementor Addons 1.3.980 Royal Elementor Addons Royal Elementor Addons 1.3.981 Royal Elementor Addons Royal Elementor Addons 1.3.982 Royal Elementor Addons Royal Elementor Addons 1.3.983 Royal Elementor Addons Royal Elementor Addons 1.3.984 Royal Elementor Addons Royal Elementor Addons 1.3.985 Royal Elementor Addons Royal Elementor Addons 1.3.986 Royal Elementor Addons Royal Elementor Addons 1.7.1 Royal Elementor Addons Royal Elementor Addons 1.7.1001 Royal Elementor Addons Royal Elementor Addons 1.7.1002	89

Common Weakness Enumeration (CWE)

CWE-639 - Authorization Bypass Through User-Controlled Key

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References