A vulnerability classified as critical has been found in wproyal Royal Addons for Elementor Plugin up to 1.7.1056 on WordPress. This affects the function
wpr_update_form_action_meta. This manipulation causes missing authorization.
This vulnerability is registered as CVE-2026-4024. Remote exploitation of the attack is possible. No exploit is available.