This vulnerability in the Disable Elementor Editor Translation plugin by Leap13 is caused by missing authorization checks, which results in incorrectly configured access control security levels. Specifically, the plugin versions up to 1.0.2 allow users with low privileges to perform actions without proper authorization. The CVSS score is 4.3 (medium), reflecting a network attack vector with low complexity, requiring low privileges, no user interaction, and impacting integrity only. There is no vendor advisory or patch information available at this time.

The vulnerability allows unauthorized modification or actions that affect the integrity of the plugin's functionality. It does not impact confidentiality or availability. Since the attack vector is network-based and requires low privileges, an attacker with limited access could exploit this to perform unauthorized changes. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to users with trusted privileges and monitor for unusual activity related to the plugin. Avoid granting unnecessary privileges to users who can interact with this plugin.