CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Element Invader Element Invader – Template Kits for Elementor elementinvader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Element Invader – Template Kits for Elementor: from n/a through <= 1.2.4.
Explanation of Vulnerability in Simple Terms
Element Invader – Template Kits for Elementor versions up to 1.2.4 lack proper authorization checks, allowing authenticated users to modify content they should not have access to. A logged-in user with low privileges can alter data without additional interaction. The vulnerability does not expose sensitive information or disrupt site availability, but can compromise content integrity.
What an attacker can do
Modify or alter content that the attacker should not have permission to change.
Potential impact on your site
Unauthorized users can alter template kits or related content, risking data corruption and loss of control over site design assets.
Conditions required to exploit
Attacker must have a low-privilege account on the site (e.g., subscriber or contributor role).
Key dates
External resources
