What is the CVSS score of EUVD-2026-45149?

EUVD-2026-45149 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.1%.

Is there a public PoC exploit available for EUVD-2026-45149?

Yes, a public proof-of-concept exploit is available for EUVD-2026-45149. Prioritise patching immediately. EPSS: 0.1%.

Is there a patch available for EUVD-2026-45149?

Yes, a patch is available for EUVD-2026-45149. Update the affected software to the latest version immediately.

Royal Addons for Elementor EUVD-2026-45149

| CVE-2026-13402 MEDIUM

Information Exposure (CWE-200)

2026-07-17 WPScan

GHSA-99vf-vh82-j89c

WordPress Information Disclosure Royal Addons For Elementor Unknown

5.3

CVSS 3.1 · Vendor: WPScan

Severity by source

Vendor (WPScan) PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

vuln.today AI

5.3 MEDIUM

Network REST endpoint requires no auth or interaction; impact is limited to partial content disclosure with no integrity or availability effect.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (WPScan).

CVSS VectorVendor: WPScan

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 22, 2026 - 09:35 vuln.today

Patch available

Jul 17, 2026 - 08:02 EUVD

CVE Published

Jul 17, 2026 - 06:00 cve.org

UNKNOWN (no severity yet)

CVE Published

Jul 17, 2026 - 06:00 cve.org

MEDIUM 5.3

DescriptionCVE.org

The Royal Addons for Elementor WordPress plugin before 1.7.1063 does not check the post status of menu items or the templates they reference in one of its REST endpoints, allowing unauthenticated users to retrieve the rendered HTML content of private or draft Elementor templates linked from non-public navigation menu items.

AnalysisAI

Royal Addons for Elementor WordPress plugin before 1.7.1063 exposes private and draft Elementor template content to unauthenticated users through a REST endpoint that fails to enforce WordPress post-status access controls. Any unauthenticated visitor can retrieve rendered HTML of restricted templates referenced by non-public navigation menu items, bypassing intended content access controls. A public proof-of-concept exists per WPScan and SSVC flags this as automatable, though EPSS at 0.15% (4th percentile) reflects no confirmed widespread exploitation; no CISA KEV listing exists.

Technical ContextAI

Royal Addons for Elementor is a WordPress plugin (CPE: cpe:2.3:a:unknown:royal_addons_for_elementor:*:*:*:*:*:*:*:*) that extends the Elementor page builder with additional elements, including navigation menus. The vulnerable component is a REST API endpoint that renders Elementor templates associated with navigation menu items without validating the underlying post status - WordPress's primary access control mechanism distinguishing published content from private, draft, pending, or future posts. CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) captures the root cause: the endpoint returns restricted content without enforcing authorization checks, allowing any HTTP client to bypass the CMS's native visibility controls.

RemediationAI

Vendor-released patch: 1.7.1063 - update Royal Addons for Elementor to this version or later through the WordPress plugin dashboard or wp-cli, which resolves the missing post-status check in the affected REST endpoint. If immediate update is not feasible, consider adding WAF rules to block unauthenticated requests to the specific plugin REST route (identifiable by the plugin's namespace in the endpoint path), though this may break legitimate navigation menu rendering for authenticated users. Alternatively, auditing and removing any private or draft templates from navigation menu items eliminates the data exposure risk without requiring a plugin update. Full details are available in the WPScan advisory at https://wpscan.com/vulnerability/1a7a9159-0e85-43c4-b1ab-7ea37a4f2d95/.