Better Elementor Addons, CVE-2023-41656

CVE, Research URL: CVE-2023-41656
Home page URL: Security reports for Better Elementor Addons
Application: Better Elementor Addons
Published on: -
Research Description: The Better Elementor Addons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the bea_admin_ajax() function hooked via an AJAX action in versions up to, and including, 1.3.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to save and reset the plugin's settings.
Affected versions: max 1.3.8.
Status: vulnerable