CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Codexpert, Inc Restrict Elementor Widgets, Columns and Sections restrict-elementor-widgets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict Elementor Widgets, Columns and Sections: from n/a through <= 1.12.
Explanation of Vulnerability in Simple Terms
The Restrict Elementor Widgets, Columns and Sections plugin for WordPress does not properly check user permissions before allowing certain actions. A logged-in user with low privileges can modify content they should not have access to. The vulnerability affects versions 1.12 and earlier.
What an attacker can do
A low-privilege logged-in user can modify Elementor content they should not have permission to change.
Potential impact on your site
Unauthorized users may alter page layouts, widgets, or sections created by other users or administrators.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., Contributor or Subscriber role).
Key dates
External resources
Related vulnerabilities
