Missing Authorization vulnerability Affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates)

CVE-2023-31080

8.8HIGH

Key Information

Vendor: Unlimited Elements
Status: Unlimited Elements For Elementor (free Widgets, Addons, Templates)
Vendor: CVE Published:; 9 June 2024

Summary

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.65.

Affected Version(s)

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.65

CVSS V3.1

Score:

8.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Jun 9, 2024
Vulnerability Reserved.
Apr 24, 2023

Collectors

NVD DatabaseMitre Database

Credit

Rafie Muhammad (Patchstack)