This vulnerability in Royal Elementor Addons involves missing authorization checks, which means that certain actions or functionalities may be accessible without proper permission validation. The affected versions include all versions up to and including 1.7.1056. The lack of access control could allow unauthorized users to perform actions that should be restricted. No patch or official fix information is currently available, and the vulnerability was published on April 15, 2026.

The impact is that unauthorized users might exploit the missing authorization to perform restricted actions within the Royal Elementor Addons plugin. The exact consequences depend on which functionalities lack proper access control, but this could lead to unauthorized modifications or access within the WordPress environment where the plugin is installed. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the plugin's functionalities through other means, such as limiting user roles or permissions in WordPress. Monitor official WP Royal or plugin distribution channels for updates or patches addressing this vulnerability.