Happy Addons for Elementor Vulnerable to Missing Authorization Exploit

CVE-2024-48045

Summary

A missing authorization vulnerability in Leevio Happy Addons for Elementor allows attackers to exploit improperly configured access control security levels. The vulnerability affects versions from n/a up through 3.12.3, which could lead to unauthorized access and manipulation of sensitive features within the plugin. This issue poses significant risks, particularly for users relying on the affected versions in WordPress environments, as it can compromise the security and integrity of web applications leveraging these functionalities.

References