1 results (0.001 seconds)
CVSS: 4.3EPSS: %CPEs: 1EXPL: 0
CVE-2023-49755 – Elementor Timeline Widget <= 2.2 - Missing Authorization to Notice Dismissal
https://notcve.org/view.php?id=CVE-2023-49755
The Elementor Timeline Widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in versions up to, and including, 2.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to dismiss notices • CWE-862: Missing Authorization •