Xpro Addons for Elementor Missing Authorization Vulnerability Allowing Unauthenticated Template Creation

A vulnerability exists in the Xpro Addons - 140+ Widgets for Elementor plugin for WordPress, in all versions through 1.5.0. The issue arises from a missing capability check in the get_content_editor function, allowing unauthenticated attackers to create and publish Xpro templates.

Impact

Exploitation of this vulnerability allows for unauthorized creation and publication of Xpro templates, potentially leading to further malicious activities or abuse of the WordPress site.

Remediation

Users are advised to update the Xpro Addons for Elementor plugin to version 1.5.1 or a newer patched version.