Aller au contenu
5.3 Moyenne

CVE-2024-0516 The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to unauthorized post metadata update due…

Description

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to unauthorized post metadata update due to a missing capability check on the wpr_update_form_action_meta function in all versions up to, and including, 1.3.87. This makes it possible for unauthenticated attackers to update certain metadata.

Produits et versions touchés

Produit Versions touchées Corrigé en
Royal Elementor Addons and Templates 1.3 premières → 1.3.87 Pas de correctif indiqué
Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.3 premières → 1.3.87 Pas de correctif indiqué
Les 34 CVE de Royal Elementor Addons and Templates →
Suivre cette CVE