CVE-2023-5360: Royal-Elementor-Addons Royal Elementor Addons

Critical severity, CVSS 9.8. EPSS: 81.7% chance of exploitation in the next 30 days.

The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.

Affected products

• Royal-Elementor-Addons Royal Elementor Addons: before 1.3.79 (fixed in 1.3.79)

Published 2023-10-31. Last modified 2026-06-17.