This vulnerability in ElementsKit Elementor addons Lite arises from missing authorization checks, classified under CWE-862. It affects versions through 3.9.6 and could allow an attacker with some privileges to perform unauthorized actions due to incorrect access control configurations. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, requiring low privileges, no user interaction, and impacting integrity only. No patch or official remediation level has been published by the vendor as of now.

The impact is limited to integrity, meaning an attacker could potentially modify or manipulate data or functionality without proper authorization. There is no impact on confidentiality or availability. The vulnerability requires the attacker to have low privileges and can be exploited remotely without user interaction. No known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently available, users should monitor vendor communications for updates. Until a patch is released, restrict access to trusted users and review permissions carefully to minimize risk.