Access Control Vulnerability in Royal Elementor Addons by WP Royal

CVE-2026-40763

What is CVE-2026-40763?

A missing authorization vulnerability exists in the Royal Elementor Addons plugin for WordPress, specifically affecting versions up to 1.7.1056. This flaw allows unauthorized users to exploit incorrectly configured access control security levels. As a result, attackers may gain unauthorized access to sensitive areas of a website, potentially leading to security breaches. To ensure the safety of your WordPress site, it is essential to update the plugin to the latest version that addresses this vulnerability.

References