CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in merkulove Logger for Elementor logger-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Logger for Elementor: from n/a through <= 1.0.9.
Explanation of Vulnerability in Simple Terms
Logger for Elementor versions up to 1.0.9 lack proper authorization checks, allowing authenticated users with low privileges to modify or disable logging functionality. An attacker with a basic user account can alter site logs or disrupt audit trails without needing higher permissions. Update to a version newer than 1.0.9 to restore proper access controls.
What an attacker can do
Modify or disable site logs and audit trails with a low-privilege user account.
Potential impact on your site
Site audit logs may be tampered with or disabled, compromising your ability to detect unauthorized activity.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site.
Key dates
External resources
