Sky Addons for Elementor <=2.6.2 Missing Authorization Arbitrary Options Update

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: - Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blog, Video Gallery) <= 2.6.2 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update 2. Vulnerability Severity: - CVSS: 3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H - CVSS: 8.1 (High) 3. Vulnerability Description: - The plugin contains a security vulnerability in all versions up to and including 2.6.2, which allows unauthorized users to modify data, leading to service disruption. The vulnerability exists in the function, allowing attackers with subscriber-level permissions or higher to update arbitrary options on the site. 4. Vulnerability Impact: - Affected Versions: <= 2.6.2 - Fixed Version: 2.6.3 5. Remediation Recommendation: - Update to version 2.6.3 or later. 6. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 7. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 8. Vulnerability Researcher: - Researcher: vgo0 9. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 10. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 11. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 12. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 13. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 14. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 15. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 16. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 17. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 18. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 19. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 20. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 21. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 22. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 23. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 24. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 25. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 26. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 27. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 28. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 29. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 30. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 31. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 32. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 33. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 34. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 35. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 36. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 37. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 38. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 39. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 40. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 41. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 42. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 43. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 44. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 45. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 46. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 47. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 48. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 49. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 50. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 51. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 52. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 53. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 54. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 55. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 56. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 57. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 58. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 59. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 60. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 61. Vulnerability Disclosure Date: - Disclosure Date: November 21, 2024 62. Vulnerability Disclosure Date: - Last Updated: November 22, 2024 63. Vulnerability Disclosure Date: - Disclosure Date:

Goal Reached Thanks to every supporter — we hit 100%!

Sky Addons for Elementor <=2.6.2 Missing Authorization Arbitrary Options Update

More from this source