Unauthenticated HTML Email Injection in Royal Elementor Addons

Executive Summary

This vulnerability is a stored HTML injection in the Royal Elementor Addons WordPress plugin before version 1.7.1067. It occurs because the plugin does not properly sanitize or escape user-submitted form widget values before including them in administrator notification emails. This allows unauthenticated attackers to inject arbitrary HTML code into these emails when a form is submitted.

Useful 0 Not Useful 0

Detection Guidance

Check the installed version of the Royal Elementor Addons plugin. If it is below 1.7.1067, the system is vulnerable. Inspect email templates or notification settings for unexpected HTML content in administrator emails.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to send malicious HTML content to the site administrator via email. This could lead to phishing attacks, session hijacking, or defacement if the injected HTML includes malicious scripts or links. The impact is limited to email content and does not directly compromise the server.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could potentially affect compliance by exposing administrators to phishing or malicious content via email, which may lead to unauthorized access or data breaches. However, the direct impact on GDPR or HIPAA compliance depends on whether such incidents result in data exposure or unauthorized processing.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Royal Elementor Addons plugin to version 1.7.1067 or later immediately. Review recent administrator emails for suspicious HTML content and remove any unauthorized injections.

Useful 0 Not Useful 0