| Package | Affected versions | Patched versions |
|---|---|---|
| royal elementor addons | < 1.3.88 | 1.3.88 |
The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to unauthorized post metadata update due to a missing capability check on the wpr_update_form_action_meta function in all versions up to, and including, 1.3.87. This makes it possible for unauthenticated attackers to update certain metadata.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free