Essential Addons for Elementor: Privilege escalation or authentication bypass
Essential Addons for Elementor is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
- Component
- Essential Addons for Elementor
- Plugin slug
essential-addons-for-elementor-lite- Affected
- See vendor advisory
- Safe version
- See mitigation notes
- Published
- May 12, 2023
This CVE was published May 12, 2023 and is one of 29 known issues for this plugin.
Patch or disable the affected component.
Update Essential Addons for Elementor to a release outside the affected range, or disable and remove it until a fixed version is available.
Technical description
Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0 through 5.7.1.
CVE / CNA vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H