This vulnerability involves missing authorization checks in the Mega Addons For Elementor plugin, allowing users with limited privileges to perform unauthorized actions. The CVSS 3.1 base score is 5.4 (medium), reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact. The affected versions include all versions up to 1.8. No official fix or patch has been published as of the data provided.

An attacker with low privileges can exploit this vulnerability to perform unauthorized actions that may affect the integrity and availability of the affected system. There is no confidentiality impact. No known exploits in the wild have been reported, so the immediate risk is moderate but should be monitored.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit user privileges to the minimum necessary and monitor for suspicious activity related to this plugin. Avoid granting unnecessary permissions to users who can interact with Mega Addons For Elementor.