This vulnerability (CWE-862) in Move Addons for Elementor involves missing authorization controls, which means that the plugin does not properly verify whether a user is authorized to perform certain actions. The affected versions include all versions up to 1.2.9. The CVSS vector indicates the attack can be performed remotely without privileges or user interaction, impacting confidentiality with no impact on integrity or availability. No vendor advisory or patch information is currently available, and no known exploits have been observed.

An attacker can remotely exploit this vulnerability without authentication or user interaction to access or perform actions that should require authorization, potentially leading to unauthorized information disclosure (limited confidentiality impact). There is no impact on integrity or availability reported. The medium severity reflects the limited scope of impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific mitigations are provided by the vendor at this time.