This vulnerability in WP Royal Royal Elementor Addons allows an attacker to bypass authentication mechanisms by spoofing, resulting in unauthorized functionality access. The issue affects versions up to 1.3.93. The CVSS 3.1 base score is 5.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. No vendor advisory or patch information is currently provided, and no known exploits have been reported.

An attacker can bypass authentication controls and gain unauthorized access to certain functionalities within the affected plugin. This could lead to limited integrity impact, such as unauthorized changes or actions within the plugin's scope. There is no direct confidentiality or availability impact reported. The vulnerability does not require privileges or user interaction to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider limiting exposure of the affected plugin, monitoring for unusual activity related to it, and applying any recommended temporary mitigations from the vendor if available.