{"title":"WordPress Royal Elementor Addons and Templates plugin <= 1.3.87 - Missing Authorization & Cross-Site Request Forgery via wpr_update_form_action_meta vulnerability","description":"Missing Authorization & Cross-Site Request Forgery via wpr_update_form_action_meta vulnerability discovered by Francesco Carlucci in WordPress Plugin Royal Elementor Addons (versions <= 1.3.87)","affected_in":"<= 1.3.87","fixed_in":"1.3.88","references":[{"slug":"patchstack","label":"PatchStack","refs":[{"value":"wordpress-royal-elementor-addons-and-templates-plugin-1-3-87-missing-authorization-cross-site-request-forgery-via-wpr-update-form-action-meta-vulnerability","label":"Details","link":"https:\/\/patchstack.com\/database\/vulnerability\/royal-elementor-addons\/wordpress-royal-elementor-addons-and-templates-plugin-1-3-87-missing-authorization-cross-site-request-forgery-via-wpr-update-form-action-meta-vulnerability?_a_id=431"}]},{"slug":"cve","label":"CVE","refs":[{"value":"2024-0511","label":"2024-0511","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-0511"}]}],"type":{"label":"Cross Site Request Forgery (CSRF)","slug":""},"id":"ps-16277","created_at":"2024-02-08T13:38:19+00:00","updated_at":"2024-02-08T13:38:19+00:00","published_at":"2024-02-08T13:35:59+00:00","score":4.3,"score_group":"","score_vector":"","is_exploited":false,"patched_in_ranges":[]}