CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in KingAddons.com King Addons for Elementor king-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects King Addons for Elementor: from n/a through <= 51.1.61.
Explanation of Vulnerability in Simple Terms
King Addons for Elementor versions up to 51.1.61 lack proper authorization checks, allowing authenticated users to access sensitive data they should not be able to view. An attacker with a low-privilege account can read confidential information without modifying or disrupting the site. Update to a version newer than 51.1.61 to resolve this issue.
What an attacker can do
Read sensitive data belonging to other users or restricted areas of the site.
Potential impact on your site
Confidential user data or site information may be exposed to authenticated attackers with limited permissions.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
