Gold Addons for Elementor, CVE-2024-12110

CVE, Research URL: CVE-2024-12110
Home page URL: Security reports for Gold Addons for Elementor
Application: Gold Addons for Elementor
Published on: Dec 06, 2024
Research Description: The Gold Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the activate() and deactivate() functions in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate and deactivate licenses.
Affected versions: max 1.3.2.
Status: vulnerable