CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
What the vulnerability does
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.65.
Explanation of Vulnerability in Simple Terms
Unlimited Elements For Elementor versions up to 1.5.65 lack proper authorization checks, allowing authenticated users to modify site content and settings beyond their intended permissions. An attacker with a low-privilege account can escalate their capabilities to perform administrative actions. The vulnerability affects confidentiality, integrity, and availability of the site.
What an attacker can do
Modify site content and settings with a low-privilege user account.
Potential impact on your site
Unauthorized users can alter pages, posts, and plugin settings, potentially defacing or disabling your site.
Conditions required to exploit
Attacker must have a valid user account with low-level permissions on the site.
Key dates
External resources
Related vulnerabilities
