Vulnerabilities > Royal Elementor Addons
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-01-10 | CVE-2022-4711 | Unspecified vulnerability in Royal-Elementor-Addons Royal Elementor Addons The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_save_mega_menu_settings' AJAX action in versions up to, and including, 1.3.59. | 4.3 |
| 2023-01-09 | CVE-2022-4102 | Missing Authorization vulnerability in Royal-Elementor-Addons Royal Elementor Addons The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorization and CSRF checks when deleting a template and does not ensure that the post to be deleted is a template. | 3.1 |
| 2023-01-09 | CVE-2022-4103 | Missing Authorization vulnerability in Royal-Elementor-Addons Royal Elementor Addons The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorisation and CSRF checks when creating a template, and does not ensure that the post created is a template. | 4.3 |