Premium Addons for Elementor, 2e5b3608-1dfc-468f-b3ae-12ce7c25ee6c
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates [premium-addons-for-elementor] < 4.5.2 Premium Addons for Elementor < 4.5.2 - Subscriber+ Arbitrary Blog Option Update The plugin does not have any CSRF and authorisation checks in the pa_dismiss_admin_notice AJAX action, available to any authenticated users, and do not validate the option key to ensure the option to update belongs to the plugin. As a result, any authenticated user, such as subscriber can update arbitrary WordPress options and set them to the value '1'. An attacker changing the users_can_register would enable users registration, other options could be changed to make the blog unusable as well.
- Affected versions
-
max 4.5.2.
- Status
-
vulnerable