CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Dragfy Dragfy Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dragfy Addons for Elementor: from n/a through 1.0.2.
Explanation of Vulnerability in Simple Terms
Dragfy Addons for Elementor versions up to 1.0.2 lack proper authorization checks on certain functions. A logged-in user with low privileges can modify or delete content they should not have access to. The vulnerability does not expose sensitive data but allows unauthorized changes to site integrity.
What an attacker can do
Modify or delete content without proper permission checks.
Potential impact on your site
Unauthorized users can alter or remove site content, compromising data integrity.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
