Lucene search

K
wpvulndbWpvulndbWPVDB-ID:CF2BD6AA-4211-4C2E-BFA2-6C8A6A3B02D0
HistoryFeb 06, 2024 - 12:00 a.m.

Happy Addons for Elementor < 3.10.2 - Missing Authorization via add_row_actions

2024-02-0600:00:00
wpscan.com
13
wordpress
elementor
unauthorized access

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Description The Happy Addons for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the add_row_actions() function in versions up to, and including, 3.10.1. This makes it possible for authenticated attackers, with contributor-level access and above, to clone arbitrary posts, including password protected posts which may allow them to access the restricted posts content.

CPENameOperatorVersion
eq3.10.2

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Related for WPVDB-ID:CF2BD6AA-4211-4C2E-BFA2-6C8A6A3B02D0