Threats tagged 'ghsa-w3vc-5h78-6ggp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	–	CVE-2026-107097The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not perform any authorization check before using Medium2026-10-28GCVE DatabaseCVE-2026-107097 The Royal Addons for Elementor WordPress plugin versions prior to 1.7.1070 lack authorization checks when using stored Mailchimp credentials. This flaw allows unauthenticated attackers to add arbitrary email addresses and contact details as confirmed subscribers to the site owner's Mailchimp audience. Report on CVE-2026-107097 Vulnerability #ghsa-w3vc-5h78-6ggp	GCVE Database	2026-10-28

Page 1 of 1