This vulnerability in the Restrict Elementor Widgets, Columns and Sections plugin by Codexpert, Inc is caused by missing authorization checks. It allows users with limited privileges to bypass intended access controls, potentially modifying or interacting with restricted Elementor widgets, columns, or sections. The CVSS score is 4.3 (medium), reflecting a network attack vector with low complexity and requiring low privileges, no user interaction, and impacts integrity only. No known exploits are reported in the wild, and no patch or remediation details are currently available.

The vulnerability allows unauthorized modification or interaction with restricted Elementor components due to missing authorization checks. This can lead to integrity issues within affected websites using the plugin. There is no impact on confidentiality or availability according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and restrict user privileges carefully to minimize risk. Monitor for updates from Codexpert, Inc regarding patches or official mitigations.