WordPress PDF for Elementor Forms and Drag and Drop Template Builder Broken Access Control Vulnerability

A broken access control vulnerability has been identified in the WordPress PDF for Elementor Forms plugin, specifically in versions through 5.5.1. This vulnerability allows users to exploit improperly configured access control security levels, potentially leading to unauthorized actions being performed.

Impact

Exploitation of this vulnerability could allow an unprivileged user to perform actions reserved for higher privileged users, due to the missing authorization checks.

Remediation

Users of the affected plugin should update to version 5.6.1 or later. Patchstack users can enable auto-update for vulnerable plugins.