CVE-2025-11363 — Royal Elementor Addons and Templates < 1.7.1037 - Unauthenticated Media File Upload

CVE-2025-11363

Royal Elementor Addons and Templates < 1.7.1037 - Unauthenticated Media File Upload PUBLISHED

Description (CNA)

The Royal Addons for Elementor WordPress plugin before 1.7.1037 does not have proper authorisation, allowing unauthenticated users to upload media files via the wpr_addons_upload_file action.

Affected (CNA)

Vendor / product	Versions
Unknown / Royal Addons for Elementor	affected 0 before 1.7.1037

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/b2eadb7a-30a4-44c7-a420-849484faccf4/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.