Sensitive Information Exposure in Royal Addons for Elementor by WordPress

CVE-2026-17585

What is CVE-2026-17585?

The Royal Addons for Elementor plugin for WordPress is impacted by a serious vulnerability that allows unauthenticated users to access sensitive postmeta information. This flaw, stemming from the 'wpr_keyword' parameter, facilitates an attacker to perform substring matching on the wp_postmeta table, potentially revealing sensitive data from all published posts. A nonce is publicly available through wp_localize_script on any frontend page that incorporates a Royal Elementor widget, enabling attackers to exploit the vulnerability without requiring an authenticated session or prior interaction.

References