This vulnerability involves missing authorization checks in the BdThemes Prime Slider – Addons For Elementor plugin, versions up to 3.11.10. An attacker with low privileges can exploit this flaw remotely over the network without user interaction to gain limited unauthorized access, potentially exposing some data. The CVSS 3.1 base score is 4.3, reflecting a low confidentiality impact and no impact on integrity or availability. No known exploits are reported in the wild. No vendor advisory or patch information is currently available.

The vulnerability allows unauthorized actions due to missing authorization controls, potentially exposing limited confidential information. There is no impact on data integrity or system availability. The attack requires low privileges but no user interaction, making it moderately accessible to attackers. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor for updates from BdThemes regarding patches or mitigations. Avoid granting unnecessary privileges to users of the affected plugin to reduce risk.