The Premium Addons for Elementor plugin for WordPress contains a CWE-400 Uncontrolled Resource Consumption vulnerability due to processing user-supplied input as a regular expression. This allows authenticated users with Author-level privileges or above to trigger a Regular Expression Denial of Service (ReDoS) by crafting malicious post titles. The vulnerability affects all versions up to 4.10.35 and can cause server resource exhaustion leading to degraded availability. The CVSS 3.1 base score is 3.1 (Low), with network attack vector, high attack complexity, low privileges required, no user interaction, and impact limited to availability.

Exploitation of this vulnerability can cause a denial of service condition by slowing down server resources when processing malicious post titles. There is no impact on confidentiality or integrity. The attack requires authenticated access at the Author level or higher, limiting the threat to users with elevated privileges. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit Author-level access to trusted users only and monitor for unusual server performance degradation related to post title processing. No official fix or patch links have been provided at this time.