Insufficient Access Control in Royal Elementor Addons for WordPress
CVE-2022-4711

4.3MEDIUM

Key Information:

Vendor
Wordpress
Status
Royal Elementor Addons (elementor Templates, Post Grid, Mega Menu & Header Footer Builder, WooCommerce Builder, Product Grid, Slider, Parallax Image & Other Free Elementor Widgets)
Vendor
CVE Published:
10 January 2023

Summary

The Royal Elementor Addons plugin for WordPress has a security weakness in its AJAX action named 'wpr_save_mega_menu_settings'. This issue permits any authenticated user, including those with minimal permissions, such as subscribers, to alter and manage Mega Menu settings across all menu items. This could lead to unauthorized changes that compromise the intended functionality and security of the website.

Affected Version(s)

Royal Elementor Addons (Elementor Templates, Post Grid, Mega Menu & Header Footer Builder, WooCommerce Builder, Product Grid, Slider, Parallax Image & other Free Elementor Widgets) * <= 1.3.59

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://plugins.trac.wordpress.org/browser/royal-elemento...
https://www.wordfence.com/blog/2023/01/eleven-vulnerabili...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ramuel Gall
.