VYPR

Royal Elementor Kit

by WordPress

CVEs (2)

  • CVE-2024-32773MedApr 24, 2024
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in WP Royal Royal Elementor Kit.This issue affects Royal Elementor Kit: from n/a through 1.0.116.

  • CVE-2024-0835MedFeb 5, 2024
    risk 0.28cvss 4.3epss 0.01

    The Royal Elementor Kit theme for WordPress is vulnerable to unauthorized arbitrary transient update due to a missing capability check on the dismissed_handler function in all versions up to, and including, 1.0.116. This makes it possible for authenticated attackers, with…