Sky Addons for Elementor <=2.6.2 Missing Authorization Arbitrary Options Update

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: - Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blog, Video Gallery) <= 2.6.2 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update 2. Vulnerability Severity: - CVSS: 3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H - CVSS: 8.1 (High) 3. Vulnerability Description: - The plugin contains a security vulnerability in all versions (including 2.6.2) that allows unauthorized users to modify data, leading to service disruption. The vulnerability exists in the function, enabling attackers with Subscriber or higher privileges to update arbitrary options on the website. 4. Vulnerability Impact: - Affected Versions: <= 2.6.2 - Fixed Version: 2.6.3 5. Remediation Recommendation: - Upgrade to version 2.6.3 or higher. 6. Disclosure Date: - Disclosure Date: November 21, 2024 7. Last Update Date: - Last Updated: November 22, 2024 8. Researcher: - Researcher: vgo0 9. Disclosure Date: - Disclosure Date: November 21, 2024 10. Last Update Date: - Last Updated: November 22, 2024 11. Disclosure Date: - Disclosure Date: November 21, 2024 12. Last Update Date: - Last Updated: November 22, 2024 13. Disclosure Date: - Disclosure Date: November 21, 2024 14. Last Update Date: - Last Updated: November 22, 2024 15. Disclosure Date: - Disclosure Date: November 21, 2024 16. Last Update Date: - Last Updated: November 22, 2024 17. Disclosure Date: - Disclosure Date: November 21, 2024 18. Last Update Date: - Last Updated: November 22, 2024 19. Disclosure Date: - Disclosure Date: November 21, 2024 20. Last Update Date: - Last Updated: November 22, 2024 21. Disclosure Date: - Disclosure Date: November 21, 2024 22. Last Update Date: - Last Updated: November 22, 2024 23. Disclosure Date: - Disclosure Date: November 21, 2024 24. Last Update Date: - Last Updated: November 22, 2024 25. Disclosure Date: - Disclosure Date: November 21, 2024 26. Last Update Date: - Last Updated: November 22, 2024 27. Disclosure Date: - Disclosure Date: November 21, 2024 28. Last Update Date: - Last Updated: November 22, 2024 29. Disclosure Date: - Disclosure Date: November 21, 2024 30. Last Update Date: - Last Updated: November 22, 2024 31. Disclosure Date: - Disclosure Date: November 21, 2024 32. Last Update Date: - Last Updated: November 22, 2024 33. Disclosure Date: - Disclosure Date: November 21, 2024 34. Last Update Date: - Last Updated: November 22, 2024 35. Disclosure Date: - Disclosure Date: November 21, 2024 36. Last Update Date: - Last Updated: November 22, 2024 37. Disclosure Date: - Disclosure Date: November 21, 2024 38. Last Update Date: - Last Updated: November 22, 2024 39. Disclosure Date: - Disclosure Date: November 21, 2024 40. Last Update Date: - Last Updated: November 22, 2024 41. Disclosure Date: - Disclosure Date: November 21, 2024 42. Last Update Date: - Last Updated: November 22, 2024 43. Disclosure Date: - Disclosure Date: November 21, 2024 44. Last Update Date: - Last Updated: November 22, 2024 45. Disclosure Date: - Disclosure Date: November 21, 2024 46. Last Update Date: - Last Updated: November 22, 2024 47. Disclosure Date: - Disclosure Date: November 21, 2024 48. Last Update Date: - Last Updated: November 22, 2024 49. Disclosure Date: - Disclosure Date: November 21, 2024 50. Last Update Date: - Last Updated: November 22, 2024 51. Disclosure Date: - Disclosure Date: November 21, 2024 52. Last Update Date: - Last Updated: November 22, 2024 53. Disclosure Date: - Disclosure Date: November 21, 2024 54. Last Update Date: - Last Updated: November 22, 2024 55. Disclosure Date: - Disclosure Date: November 21, 2024 56. Last Update Date: - Last Updated: November 22, 2024 57. Disclosure Date: - Disclosure Date: November 21, 2024 58. Last Update Date: - Last Updated: November 22, 2024 59. Disclosure Date: - Disclosure Date: November 21, 2024 60. Last Update Date: - Last Updated: November 22, 2024 61. Disclosure Date: - Disclosure Date: November 21, 2024 62. Last Update Date: - Last Updated: November 22, 2024 63. Disclosure Date: - Disclosure Date: November 21, 2024 64. Last Update Date: - Last Updated: November 22, 2024 65. Disclosure Date: - Disclosure Date: November 21, 2024 66. Last Update Date: - Last Updated: November 22, 2024 67. Disclosure Date: - Disclosure Date: November 21, 2024 68. Last Update Date: - Last Updated: November 22, 2024 69. Disclosure Date: - Disclosure Date: November 21, 2024 70. Last Update Date: - Last Updated: November 22, 2024

Goal Reached Thanks to every supporter — we hit 100%!

Sky Addons for Elementor <=2.6.2 Missing Authorization Arbitrary Options Update

More from this source