Leap13 Premium Addons for Elementor Missing Authorization Vulnerability Allowing Settings Change

A missing authorization vulnerability has been identified in the Leap13 Premium Addons for Elementor plugin, specifically in versions through 4.11.63. This vulnerability arises from incorrectly configured access control, allowing unauthorized users to change settings within the plugin.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in plugin settings, potentially allowing for further exploitation or manipulation of the WordPress site.

Remediation

Users of the Leap13 Premium Addons for Elementor plugin should update to version 4.11.64 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.