CVE-2024-50442: Royal-Elementor-Addons Royal Elementor Addons

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through <= 1.3.980.

Affected products

• Royal-Elementor-Addons Royal Elementor Addons: before 1.3.981 (fixed in 1.3.981)

Published 2024-10-28. Last modified 2026-06-17.