https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:16:21 +0000 https://cve.radiocsirt.org/vuln/cve-2026-6229 <p><strong>Affected:</strong> wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor</p> <p>The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.7.1057. This is due to insufficient validation of user-supplied URLs in the render_csv_data() function, which can be bypassed by including &#39;docs.google.com/spreadsheets&#39; in a query parameter, and the subsequent use of these URLs in fopen() calls without blocking internal or private network addresses. This makes it possible for authenticated attackers, with Contributor-level access and above, to make requests to arbitrary URLs and retrieve sensitive information from internal services.</p> <p><strong>Affected:</strong> wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor</p> <p>The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.7.1057. This is due to insufficient validation of user-supplied URLs in the render_csv_data() function, which can be bypassed by including &#39;docs.google.com/spreadsheets&#39; in a query parameter, and the subsequent use of these URLs in fopen() calls without blocking internal or private network addresses. This makes it possible for authenticated attackers, with Contributor-level access and above, to make requests to arbitrary URLs and retrieve sensitive information from internal services.</p> https://cve.radiocsirt.org/vuln/cve-2026-6229