CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Authentication Bypass Using an Alternate Path or Channel vulnerability in kamleshyadav Miraculous Elementor miraculous-el allows Authentication Abuse.This issue affects Miraculous Elementor: from n/a through <= 2.0.7.
Explanation of Vulnerability in Simple Terms
Miraculous Elementor versions 2.0.7 and earlier contain an authentication bypass vulnerability. An attacker with low-level user access can read sensitive data, modify site content, or disrupt service without additional interaction. The vulnerability affects the core functionality and requires only network access and valid login credentials to exploit.
What an attacker can do
Read sensitive data, modify site content, or disrupt service availability with a low-privilege user account.
Potential impact on your site
Any registered user can access restricted features, modify content, or cause downtime without admin approval.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site.
Key dates
External resources
