WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Broken Access Control vulnerability
CVE-2024-43932
8.8HIGH
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 1 November 2024
What is CVE-2024-43932?
A missing authorization vulnerability exists in The Plus Addons for Elementor Page Builder Lite, allowing unauthorized access due to incorrectly configured access control security levels. Attackers can exploit this issue to manipulate functionalities and content without proper authentication. Affected versions span from n/a up to 5.6.2, raising significant concerns for users employing this plugin, necessitating immediate attention to security practices.
Affected Version(s)
The Plus Addons for Elementor Page Builder Lite <= 5.6.2