Lucene search

CVE-2022-4705

🗓️ 10 Jan 2023 16:38:55Reported by WordfenceType

The Royal Elementor Addons plugin for WordPress has insufficient access control in the 'wpr_final_settings_setup' AJAX action, allowing any authenticated user to finalize activation of preset site configuration templates

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 16
Prion	Improper access control	10 Jan 202317:15	–	prion
Prion	Improper access control	10 Jan 202317:15	–	prion
NVD	CVE-2022-4705	10 Jan 202317:15	–	nvd
NVD	CVE-2022-4704	10 Jan 202317:15	–	nvd
Vulnrichment	CVE-2022-4705	10 Jan 202316:55	–	vulnrichment
Vulnrichment	CVE-2022-4704	10 Jan 202316:55	–	vulnrichment
CVE	CVE-2022-4705	10 Jan 202317:15	–	cve
CVE	CVE-2022-4704	10 Jan 202317:15	–	cve
Patchstack	WordPress Royal Elementor Addons Plugin <= 1.3.59 is vulnerable to Broken Access Control	10 Jan 202300:00	–	patchstack
Patchstack	WordPress Royal Elementor Addons Plugin <= 1.3.59 is vulnerable to Broken Access Control	10 Jan 202300:00	–	patchstack

[
  {
    "vendor": "wproyal",
    "product": "Royal Elementor Addons (Elementor Templates, Post Grid, Mega Menu & Header Footer Builder, WooCommerce Builder, Product Grid, Slider, Parallax Image & other Free Elementor Widgets)",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.3.59",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/royal-elementor-addons/trunk/admin/templates-kit.php
wordfence	www.wordfence.com/blog/2023/01/eleven-vulnerabilities-patched-in-royal-elementor-addons/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/0a941aef-85f6-4719-b6ab-ace77a03e93e

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Jan 2023 16:55Current

6.1Medium risk

Vulners AI Score6.1

CVSS34.3

EPSS0.0008