Report
The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_import_library_template' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to import and activate templates from the plugin's template library.
Score:4.3
Severity:Medium
Version: 1.3.59
There is a patch available in v1.3.60 and we strongly recommend you update to this version as soon as possible.