CVE-2026-13402
Royal Elementor Addons < 1.7.1063 - Unauthenticated Private Mega Menu Template Disclosure
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Royal Addons for Elementor WordPress plugin before 1.7.1063 does not check the post status of menu items or the templates they reference in one of its REST endpoints, allowing unauthenticated users to retrieve the rendered HTML content of private or draft Elementor templates linked from non-public navigation menu items.
| Vendor | unknown |
| Product | royal addons for elementor |
| Published | Jul 17, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown royal addons for elementor
Be the first to know when new unknown vulnerabilities affecting unknown royal addons for elementor are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Royal Addons for Elementor
0 < 1.7.1063
References
Credits
Pablo González and Francisco José Ramírez WPScan