Spider Themes Spider Elements Addons for Elementor Broken Access Control Vulnerability

A missing authorization vulnerability has been identified in the Spider Elements Addons for Elementor plugin, specifically in versions through 1.6.4. This vulnerability allows exploitation of improperly configured access control, potentially enabling users to perform actions reserved for higher privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized users gaining access to restricted functions or data, allowing them to perform actions that should be limited to users with higher privileges.

Remediation

Users of the Spider Elements Addons for Elementor plugin are advised to update to version 1.6.4 or later. For those unable to update immediately, Patchstack has issued a virtual patch that can be applied to mitigate this vulnerability.