This vulnerability in Absolute Addons For Elementor arises from missing authorization controls, allowing exploitation of incorrectly configured access control security levels. It affects versions up to and including 1.0.14. The CVSS 3.1 base score is 4.3 (medium), reflecting network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality or availability impact, but with integrity impact. No patch or vendor advisory is currently available to confirm remediation status.

An attacker with some level of privileges could exploit this missing authorization vulnerability to perform unauthorized actions that impact the integrity of the affected system. There is no impact on confidentiality or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations where possible to limit privilege escalation or unauthorized actions within Absolute Addons For Elementor.