Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-4703
HistoryJan 10, 2023 - 5:15 p.m.

Improper access control

2023-01-1017:15:00
PRIOn knowledge base
www.prio-n.com
3
improper access control
vulnerability
wordpress

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.1%

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the ‘wpr_reset_previous_import’ AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to reset previously imported data.

CPENameOperatorVersion
royal_elementor_addonsle1.3.59

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.1%