Missing Authorization vulnerability Affects Move Addons for Elementor
CVE-2024-30525

5.3MEDIUM

Key Information:

Vendor

WordPress
Status
Move Addons For Elementor
Vendor
CVE Published:
4 June 2024

What is CVE-2024-30525?

The Move Addons for Elementor plugin is exposed to a Missing Authorization vulnerability, allowing unauthorized users to access restricted functionalities. This security flaw affects all versions of the plugin up to 1.2.9 and could lead to unauthorized actions, significantly jeopardizing the website's security. It is essential for users to update their plugins and implement necessary security measures to mitigate potential risks associated with this vulnerability.

Affected Version(s)

Move Addons for Elementor <= 1.2.9

References

https://patchstack.com/database/vulnerability/move-addons...
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.