cleantalk
Vulnerabilities and Security Researches

Elementor Website Builder – More than Just a Page Builder, 0b68091c-6a05-4f81-a718-6ec139df2e96

Published on
-
Research Description
Elementor Website Builder &#8211; more than just a page builder [elementor] < 3.13.2 Elementor Website Builder &lt; 3.13.2 - Missing Authorization The plugin does not check user capabilities on several functions, allowing authenticated attackers with a low amount of privilege (such as Subscribers) to perform actions that should only be available to users with higher privileges.
Affected versions
max 3.13.2.
Status
vulnerable