Ultimate Post Kit – Elementor Post Grid, Post Carousel, Post Slider & Blog Layout Widgets < 4.5.6 - Missing Authorization

Description

The Ultimate Post Kit – Elementor Post Grid, Post Carousel, Post Slider & Blog Layout Widgets plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 4.5.5. This is due to a missing capability check on a function. This makes it possible for authenticated attackers, with contributor-level access and above, to perform an unauthorized action.