The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.7.1049 via the get_main_query_args() function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract contents of non-public custom post types, such as Contact Form 7 submissions or WooCommerce coupons.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Royal Elementor Addons Plugin | — | Update royal-elementor-addons plugin to version 1.7.1050, or a newer patched version | Apr 30, 2026 | Mar 16, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub