CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Dynamic.ooo Dynamic Visibility for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dynamic Visibility for Elementor: from n/a through 5.0.5.
Explanation of Vulnerability in Simple Terms
Dynamic Visibility for Elementor versions up to 5.0.5 lack proper authorization checks, allowing authenticated users with low privileges to modify or disable content visibility settings they should not have access to. An attacker can alter the integrity of published pages by changing which elements are visible to site visitors. Update to a version newer than 5.0.5.
What an attacker can do
Modify content visibility settings on pages they don't own or have permission to edit.
Potential impact on your site
Unauthorized users can alter which page elements display to visitors, potentially hiding or showing unintended content.
Conditions required to exploit
Attacker must have a low-privilege user account on the site (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
