Premium Addons for Elementor < 4.11.54 - Arbitrary Template Creation via CSRF

Description

The plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation in the 'insert_inner_template' function. This makes it possible for unauthenticated attackers to create arbitrary Elementor templates via a forged request granted they can trick a site administrator or other user with the edit_posts capability into performing an action such as clicking on a link.