The Template Catalog import AJAX handlers in King Addons for Elementor did not check whether the requesting user was allowed to edit the page being overwritten. Any authenticated user able to reach the action could replace the contents of pages belonging to other users. The fix adds a current_user_can('edit_post', $page_id) capability check before... Weiterlesen
Intelligence View
⚡ tsecurity.de Intelligence
Missing Authorization in King Addons Template Catalog Import
The Template Catalog import AJAX handlers in King Addons for Elementor did not check whether the requesting user was allowed to edit the page being overwritten. Any authenticated user able to reach the action could replace the contents of…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR