CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Leap13 Disable Elementor Editor Translation disable-elementor-editor-translation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Disable Elementor Editor Translation: from n/a through <= 1.0.2.
Explanation of Vulnerability in Simple Terms
The Disable Elementor Editor Translation plugin for WordPress contains an authorization flaw that allows authenticated users with low privileges to modify site content. An attacker with a basic user account can bypass intended access controls and alter data they should not be able to change. Update to a version newer than 1.0.2 to resolve this issue.
What an attacker can do
Modify site content or settings they should not have permission to change.
Potential impact on your site
Unauthorized users can alter your site's content, potentially defacing pages or injecting malicious material.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., Contributor or Subscriber).
Key dates
External resources
Related vulnerabilities
