CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Addons for Elementor: from n/a through <= 6.2.4.
Explanation of Vulnerability in Simple Terms
Essential Addons for Elementor versions up to 6.2.4 lack proper authorization checks, allowing high-privilege users to access sensitive information they should not see. The vulnerability requires administrator-level access and does not affect data integrity or availability. A patch version has not been publicly identified.
What an attacker can do
Read sensitive information on the site if they have administrator access.
Potential impact on your site
Administrators with malicious intent or compromised admin accounts can view data they shouldn't access.
Conditions required to exploit
Attacker must have administrator-level privileges on the WordPress site.
Key dates
External resources
Related vulnerabilities
