This vulnerability in Happy Addons for Elementor arises from missing authorization checks, which means that certain actions can be performed without proper permission validation. The issue affects all versions up to 3.12.3. The CVSS vector indicates that the attack can be performed remotely over the network with low complexity and requires low privileges but no user interaction. The impact is limited to integrity, with no confidentiality or availability impact reported. No vendor advisory or patch information is currently available.

The vulnerability allows unauthorized users with low privileges to perform actions that could alter data or configurations within the plugin, potentially leading to integrity issues. There is no indication of confidentiality or availability being affected. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the plugin's administrative functions to trusted users only and monitor for unusual activity related to the plugin. Avoid granting unnecessary privileges to users who can interact with the plugin.