CVE-2024-0513

CVE-2024-0513 affects Royal Elementor Addons and Templates for WordPress up to version 1.3.87, due to missing/incorrect nonce validation in remove_from_wishlist, enabling unauthenticated CSRF to remove items from user wishlists if a site admin is tricked into clicking a forged link. Patch availab...