CVE-2026-17585 | wproyal Royal Addons for Elementor Plugin up to 1.7.1066 on WordPress Royal Elementor Widget wp_localize_script wpr_keyword information disclosure

SecurityVulns
Yanac

A vulnerability described as problematic has been identified in wproyal Royal Addons for Elementor Plugin up to 1.7.1066 on WordPress. Affected is the function wp_localize_script of the component Royal Elementor Widget. Executing a manipulation of the argument wpr_keyword can lead to information disclosure.

This vulnerability is tracked as CVE-2026-17585. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More