blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2026-8118

MEDIUM 6.5 CVSS 3.1
Published
June 19, 2026
Last modified
June 22, 2026
NVD status
Deferred
Reported by
security@wordfence.com
Weakness
CWE-73
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to Arbitrary File Read in versions 1.7.1058 through 1.7.1059. This is due to the wpr_get_csv_handle() helper (introduced in version 1.7.1058 as part of the patch for CVE-2026-6229) falling back to is_readable() and fopen($source, 'r') on the attacker-controlled settings.table_upload_csv.url value when it does not parse as an HTTP URL, with no allow-list, traversal block, or extension check. This makes it possible for authenticated attackers, with Contributor-level access and above, to save a crafted wpr-data-table widget through Elementor's save_builder endpoint and have the rendered preview return the line-by-line contents of any file readable by the PHP process, including wp-config.php.

Affected WordPress components

  • Royal Addons for Elementor – Addons and Templates Kit for Elementor Plugin · royal-elementor-addons
    Confirmed match Active
    From 1.7.1058 (including) to 1.7.1059 (including)
    View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor — From 1.7.1058 (including) to 1.7.1059 (including)

References