This vulnerability (CWE-862) in Jewel Theme's Master Addons for Elementor plugin involves missing authorization checks, allowing users with some privileges to potentially access or perform actions they should not be authorized to. It affects all versions up to 2.0.5.4.1. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, requiring privileges, no user interaction, and limited confidentiality impact. No vendor advisory or patch is currently available, and no exploits are known in the wild.

The vulnerability could allow an attacker with some level of privileges to bypass authorization controls, potentially leading to limited unauthorized information disclosure. There is no impact on data integrity or system availability. The overall impact is considered medium severity based on the CVSS score and described effects.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to trusted users only and monitor for any unusual activity related to the plugin. Avoid granting unnecessary privileges to users interacting with the affected plugin.