Missing Authorization Vulnerability Affects Rife Elementor Extensions & Templates

CVE-2023-27454

Summary

A missing authorization vulnerability has been identified in Apollo13Themes' Rife Elementor Extensions & Templates. This weakness arises from incorrectly configured access control security levels that can be exploited. As a result, unauthorized users may gain access to sensitive functionalities or data within the affected versions, specifically from the initial release up to version 1.1.10 of the product. The vulnerability places a significant security risk on installations utilizing these plugins, requiring immediate attention to ensure proper access controls are enforced.

References