CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
What the vulnerability does
Missing Authorization vulnerability in Wealcoder Animation Addons for Elementor animation-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animation Addons for Elementor: from n/a through <= 2.4.5.
Explanation of Vulnerability in Simple Terms
Animation Addons for Elementor versions up to 2.4.5 lack proper authorization checks, allowing authenticated users to modify content they should not have access to. An attacker with a low-privilege account can change animations and related settings on pages or posts beyond their assigned permissions. This affects sites where multiple user roles are in use and content isolation is expected.
What an attacker can do
Modify animations and settings on pages or posts they lack permission to edit.
Potential impact on your site
Unauthorized users can alter page animations and appearance, potentially defacing content or disrupting site design.
Conditions required to exploit
Attacker must have a low-privilege user account on the site (e.g., contributor or subscriber).
Key dates
External resources
