cleantalk
Vulnerabilities and Security Researches

Elementor Addons, Widgets and Enhancements – Stax, 0ab16fc63ad77c8b7e6d60604282a5fc981f3f0b

Published on
Mar 21, 2023
Research Description
Elementor Addons, Widgets and Enhancements &#8211; Stax [stax-addons-for-elementor] < 1.4.4.1 (closed) WordPress Elementor Addons, Widgets and Enhancements – Stax Plugin <= 1.4.3 is vulnerable to Cross Site Request Forgery (CSRF) No patched version is available. No reply from the vendor. Lana Codes discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress Elementor Addons, Widgets and Enhancements – Stax Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. This vulnerability has not been known to be fixed yet.
Affected versions
max 1.4.4.1.
Status
vulnerable