CVE-2026-13405 | Royal Addons Plugin up to 1.7.1065 on WordPress Custom Widget Markup code injection

August 20, 2026 Yanac

A vulnerability was found in Royal Addons Plugin up to 1.7.1065 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Custom Widget Markup. Such manipulation leads to code injection.

This vulnerability is uniquely identified as CVE-2026-13405. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More