CVE-2022-4700

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the wpr_activate_required_theme AJAX action in versions up to and including 1.3.59 . This flaw allows any authenticated user , including those with subscriber-level permissions , to activate the 'royal...

WordPress Royal Elementor Addons Plugin <= 1.3.59 is vulnerable to Broken Access Control

Software Royal Elementor Addons Type Plugin Vulnerable versions = 1.3.59 Fixed in 1.3.60 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-4700 Patch priority Medium CVSS severity Medium 5.4 Developer WProyal PSID 423004fa0a2f Credits Ramuel Gall Required...