#VU71386 Improper access control in Royal Elementor Addons - CVE-2022-4702

Vulnerability identifier: #VU71386

Vulnerability risk: Medium

CVSSv4.0: 1.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-4702

CWE-ID: CWE-284

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Royal Elementor Addons
Web applications / Modules and components for CMS

Vendor: WP Royal

Description

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions in the wpr_fix_royal_compatibility AJAX action. A remote user can deactivate every plugin on the site unless it is part of an extremely limited hardcoded selection.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

Royal Elementor Addons: 1.3 - 1.3.59

---

External links
https://www.wordfence.com/blog/2023/01/eleven-vulnerabilities-patched-in-royal-elementor-addons/
https://plugins.trac.wordpress.org/browser/royal-elementor-addons/trunk/admin/templates-kit.php?rev=2833046
https://www.wordfence.com/threat-intel/vulnerabilities/id/cb47b6cc-87e4-4d29-bbc7-6d7552bc3943

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.