The vulnerability CVE-2024-56227 affects the Royal Elementor Addons plugin for WordPress, where missing authorization checks allow users with limited privileges to perform actions beyond their intended access level. This incorrect access control can lead to integrity violations within the affected plugin. The CVSS score is 4.3 (medium), reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and impact limited to integrity. The affected versions include all versions up to 1.7.1001. No official patch or remediation guidance has been published by the vendor yet.

The vulnerability allows an attacker with low privileges to perform unauthorized actions that can modify data or settings within the Royal Elementor Addons plugin. There is no impact on confidentiality or availability reported. No known exploitation in the wild has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict user privileges to trusted users only and monitor for suspicious activity related to the plugin. Avoid granting unnecessary permissions to users who can interact with the affected plugin components.