CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
The Premium Addons for Elementor plugin for WordPress is vulnerable to Arbitrary Option Updates in versions up to, and including, 4.5.1. This is due to missing capability and nonce checks in the pa_dismiss_admin_notice AJAX action. This makes it possible for authenticated subscriber+ attackers to change arbitrary options with a restricted value of 1 on vulnerable WordPress sites.
Explanation of Vulnerability in Simple Terms
Premium Addons for Elementor versions up to 4.5.1 lack proper authorization checks, allowing authenticated users with low privileges to perform actions they should not be able to access. The vulnerability requires user interaction and can affect data confidentiality, integrity, and availability. Site administrators should update to a version newer than 4.5.1.
What an attacker can do
A low-privilege authenticated user can perform unauthorized actions affecting site data and functionality.
Potential impact on your site
Unauthorized users may read, modify, or disrupt site content and functionality if they have any account access.
Conditions required to exploit
Attacker must have a low-privilege account on the site and trick a user into clicking a malicious link or visiting a crafted page.
Key dates
External resources
Related vulnerabilities
