This vulnerability in WP Royal Royal Elementor Addons (up to version 1.7.1056) is due to missing authorization checks, which results in incorrect access control enforcement. The issue allows unauthorized users to perform actions that should require authorization, potentially leading to integrity violations. The CVSS score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity. No patch or vendor advisory is currently available to confirm remediation status.

The vulnerability can be exploited remotely without authentication or user interaction, allowing an attacker to perform unauthorized actions that affect the integrity of the affected system. There is no impact on confidentiality or availability reported. No known exploits exist in the wild, so the immediate risk is moderate but should be monitored.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected plugin features or disabling the plugin if feasible to reduce exposure. Monitor official WP Royal or plugin vendor channels for updates.