CVE-2026-19226 | Royal Addons Plugin up to 1.7.1065 on WordPress Widget Settings cross site scripting

August 26, 2026 Yanac

A vulnerability marked as problematic has been reported in Royal Addons Plugin up to 1.7.1065 on WordPress. Affected by this issue is some unknown functionality of the component Widget Settings. The manipulation leads to cross site scripting.

This vulnerability is listed as CVE-2026-19226. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More