Royal Elementor Addons < 1.3.60 - Subscriber+ Template Kit Import

Description

The plugin does not have authorisation and CSRF checks when importing and activating template from the vendor library, which could allow any authenticated user, such as subscriber to perform such action