Live › vulnerability › CVE-2026-97255
Go to dashboardThe Royal Elementor Addons WordPress plugin trusts a user-controlled key when checking authorization, so access controls can be bypassed. The sources do not say what an attacker gains beyond bypassing the check.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 10:29 UTC. All times on this page are UTC.
Sites running the Royal Elementor Addons plugin at version or earlier are listed as affected. The sources do not say which features or settings make a site exposed, so assume any site with the plugin active until the vendor says otherwise. Sites without the plugin installed are not affected.
1.7.1069No product ranges from the sources yet.
wp plugin get royal-elementor-addons --field=version1.7.1069 are listed as affected1.7.1069 once a patched release is confirmedEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Authorization Bypass Through User-Controlled Key vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Royal Elementor Addons: from n/a through 1.7.1069.
This page as .md · .json · in your agent: get_signal("CVE-2026-97255")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.