A vulnerability, which was classified as critical, has been found in wproyal Royal Addons for Elementor Plugin up to 1.7.1057 on WordPress. Affected by this issue is the function
render_csv_data of the component Query Parameter Handler. This manipulation causes server-side request forgery.
This vulnerability appears as CVE-2026-6229. The attack may be initiated remotely. There is no available exploit.