CVE-2026-111851

Published Oct 22, 2026

Last updated 3 days ago

CVSS high 7.6

Overview

Description
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Code Injection.This issue affects Royal Elementor Addons: from n/a through 1.7.1068.
Source
audit@patchstack.com
NVD status
Deferred

Risk scores

CVSS 3.1

Type
Secondary
Base score
7.6
Impact score
4.7
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Severity
HIGH

Weaknesses

audit@patchstack.com
CWE-470

Social media

Hype score
Not currently trending

References

Sources include official advisories and independent security research.