This vulnerability in the Buttoner for Elementor plugin arises from missing authorization checks, which could allow an attacker with low privileges to perform actions beyond their intended access level. The issue affects all versions up to 1.0.6. The CVSS vector indicates network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, and low impact on confidentiality and integrity. No patch or vendor advisory is available to confirm remediation status.

The vulnerability could allow an attacker with some level of privileges to bypass access controls, potentially leading to unauthorized information disclosure or modification within the plugin's functionality. There is no impact on availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the plugin's administrative functions to trusted users only and monitor for unusual activity related to the plugin.