A vulnerability classified as critical has been found in wproyal Royal Addons for Elementor Plugin up to 1.7.1056 on WordPress. This affects the function wpr_update_form_action_meta. This manipulation causes missing authorization.

This vulnerability is registered as CVE-2026-4024. Remote exploitation of the attack is possible. No exploit is available.