This vulnerability in Exclusive Addons Elementor is classified as CWE-862, Missing Authorization. It affects versions through 2.6.9.1 and allows an attacker with some level of privileges to perform actions without proper authorization checks. The CVSS 3.1 vector indicates the attack can be performed remotely with low complexity and requires low privileges but no user interaction, impacting confidentiality to a limited extent. No official fix or patch has been disclosed, and the vendor has not provided remediation details. The product is not a cloud service, so remediation depends on vendor patch releases.

The vulnerability allows unauthorized access to certain functionalities within the Exclusive Addons Elementor plugin, potentially exposing limited confidential information. It does not impact integrity or availability. The medium severity score reflects that the exploit requires some privileges and does not lead to full compromise. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict plugin access to trusted users only and monitor for updates from the vendor. No vendor advisory or patch links are currently available.