WordPress Plugin Vulnerabilities

Elementor Website Builder < 3.13.2 - Missing Authorization

Description

The plugin does not check user capabilities on several functions, allowing authenticated attackers with a low amount of privilege (such as Subscribers) to perform actions that should only be available to users with higher privileges.

Affects Plugins

Fixed in 3.13.2

Classification

Type
NO AUTHORISATION
CWE

Miscellaneous

Timeline

Publicly Published
2023-05-12 (about 2 years ago)
Added
2023-05-12 (about 2 years ago)
Last Updated
2023-05-12 (about 2 years ago)

Other