Lucene search

K
wpvulndbWpvulndbWPVDB-ID:E9DDA50C-B2F6-4FBE-8E40-5AFF175B8916
HistoryNov 24, 2023 - 12:00 a.m.

Elements kit Elementor addons < 2.9.2 - Missing Authorization

2023-11-2400:00:00
wpscan.com
2
plugin
vulnerable
authorization
dismissal
capability check

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Description The plugin is vulnerable to unauthorized admin notice dismissal due to a missing capability check on the dismiss_ajax_call function, making it possible for authenticated attackers, with subscriber-level access and above, to dismiss notices intended for admins.

CPENameOperatorVersion
eq2.9.2

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Related for WPVDB-ID:E9DDA50C-B2F6-4FBE-8E40-5AFF175B8916