Elementor Addon Elements < 1.12.8 - Elementor Addon Element Enabling/Disabling via CSRF

2023-11-1600:00:00

wpscan.com

elementor addon

csrf

security vulnerability

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

28.6%

JSON

Description The plugin does not have CSRF check in its eae_save_elements function, which could allow attackers to make logged in admins enable and disable Elementor add-on elements via a CSRF attack