A vulnerability was found in wproyal Royal Addons for Elementor Plugin up to 1.7.1049 on WordPress. It has been declared as problematic. Affected is the function get_main_query_args. Such manipulation leads to missing authorization.

This vulnerability is referenced as CVE-2026-2373. It is possible to launch the attack remotely. No exploit is available.