WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerability

CVE-2024-47361

What is CVE-2024-47361?

A missing authorization vulnerability exists in the WPVibes Elementor Addon Elements that allows unauthorized users to exploit access control configurations. This issue arises due to incorrectly set security levels, which could lead to unauthorized access to sensitive functionalities of the plugin. The flaw affects all versions from n/a up to and including 1.13.6. Proper access control measures should be implemented to mitigate the risk associated with this vulnerability.

References