CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Apollo13Themes Rife Elementor Extensions & Templates allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rife Elementor Extensions & Templates: from n/a through 1.1.10.
Explanation of Vulnerability in Simple Terms
Rife Elementor Extensions & Templates through version 1.1.10 lacks proper authorization checks on certain functions. A logged-in user with low privileges can modify or delete content they should not have access to. The vulnerability does not expose sensitive data but allows unauthorized changes to site integrity.
What an attacker can do
Modify or delete site content without proper permission.
Potential impact on your site
Unauthorized users can alter or remove pages, posts, or settings managed by the extension.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
