CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through <= 1.5.109.
Explanation of Vulnerability in Simple Terms
Unlimited Elements For Elementor fails to properly check user permissions before allowing access to certain administrative functions. A logged-in user with low privileges can view sensitive information they should not have access to. The vulnerability affects versions up to 1.5.109. Update to a version newer than 1.5.109 to resolve this issue.
What an attacker can do
View sensitive information restricted to higher-privilege users.
Potential impact on your site
Unauthorized users can access restricted data, potentially exposing site configuration or other users' information.
Conditions required to exploit
Attacker must be logged in with a low-privilege account (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
