CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in anantaddons Anant Addons for Elementor anant-addons-for-elementor allows Cross Site Request Forgery.This issue affects Anant Addons for Elementor: from n/a through <= 1.1.8.
Explanation of Vulnerability in Simple Terms
Anant Addons for Elementor versions up to 1.1.8 contain a cross-site request forgery (CSRF) vulnerability. An attacker can trick a logged-in site administrator into performing unwanted actions—such as changing settings, creating content, or modifying plugin configuration—by sending them a malicious link or embedding code on another website. The vulnerability affects all users and requires no special privileges to exploit.
What an attacker can do
Trick a logged-in admin into performing unwanted actions on the site without their knowledge.
Potential impact on your site
An attacker can modify plugin settings, create or delete content, or change site configuration if an admin is tricked into clicking a link.
Conditions required to exploit
Admin must be logged in and click a malicious link or visit an attacker-controlled page.
Key dates
External resources
Related vulnerabilities
