Threats tagged 'ghsa-w36j-ww57-r68h'

The ElementsKit Elementor Addons plugin for WordPress up to version 3.8.2 contains a vulnerability that allows unauthenticated attackers to modify Elementor widget content. This occurs due to a missing capability check in the Live_Action::reset() function, which can be triggered via specially crafted URLs with specific GET parameters. Exploitation results in permanent overwriting of custom widget designs, text, and configurations with a blank template.