This vulnerability in UltraAddons Elementor Lite (<= 2.0.2) allows CSRF attacks, where an attacker can induce an authenticated user to perform actions without their consent. The vulnerability does not require privileges (PR:N) but does require user interaction (UI:R). The impact is limited to integrity (I:L) with no confidentiality or availability impact. The attack vector is network (AV:N) and the attack complexity is low (AC:L).

An attacker could exploit this CSRF vulnerability to cause an authenticated user to perform unintended actions within the UltraAddons Elementor Lite plugin. The impact is limited to integrity, meaning unauthorized changes could be made, but there is no direct confidentiality or availability impact. No known exploits are currently reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is released, users should consider implementing CSRF protections such as verifying nonces or tokens in requests if possible. Monitor vendor channels for updates and apply patches promptly once available.