This vulnerability in News Kit Elementor Addons arises from missing authorization checks, which means certain actions or resources may be accessible without proper permission validation. The affected versions include all releases up to 1.4.2. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low attack complexity, requiring low privileges and no user interaction, resulting in integrity impact only. There is no indication of confidentiality or availability impact. No vendor advisory or patch information is provided, and no known exploits have been reported.

The impact is limited to integrity, meaning an attacker with low privileges could potentially perform unauthorized modifications within the plugin's scope. There is no impact on confidentiality or availability. Since no known exploits are in the wild, the immediate risk appears moderate but should be addressed to prevent potential misuse.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the plugin's administrative functions to trusted users only and monitor for unusual activity related to the plugin. Avoid exposing the plugin to untrusted users or networks.