A vulnerability identified as problematic has been detected in wproyal Royal Addons for Elementor Plugin up to 1.7.1049 on WordPress. Affected by this issue is some unknown functionality of the component Parameter Handler. The manipulation of the argument button_text leads to cross site scripting.
This vulnerability is documented as CVE-2026-0664. The attack can be initiated remotely. There is not any exploit available.
You should upgrade the affected component.
