2 matches found
VulnCheck KEV: CVE-2022-4701
The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpractivaterequiredplugins' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the...
8.8CVSS7.6AI score0.00762EPSS
SaveIn wildExploits1References2
CVE-2022-4701: Improper Authorization
The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpractivaterequiredplugins' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the...
8.8CVSS5.7AI score0.00762EPSS
SaveExploits1References2
20