ShopEngine Elementor WooCommerce Builder Addon Unauthorized Settings Update Vulnerability

A vulnerability exists in the ShopEngine Elementor WooCommerce Builder Addon for WordPress, specifically in versions through 4.8.3. The issue arises from an incorrect capability check in the post_save() function, allowing authenticated attackers with Editor-level access or higher to unauthorizedly modify the plugin's settings.

Impact

Exploitation of this vulnerability allows for unauthorized modification of the plugin's settings by users with Editor-level access or higher.

Remediation

Users can update to version 4.8.4 or a newer patched version to address this vulnerability.