CVE-2024-5382
Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.1 - Missing Authorization to MA Template Creation or Modification
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ma-template' REST API route in all versions up to, and including, 2.0.6.1. This makes it possible for unauthenticated attackers to create or modify existing Master Addons templates or make settings modifications related to these templates.
| CWE | CWE-862 |
| Vendor | litonice13 |
| Product | master addons for elementor – widgets, extensions, theme builder, popup builder & template kits |
| Published | Jun 7, 2024 |
| Last Updated | Apr 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits
Be the first to know when new medium vulnerabilities affecting litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kits are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
litonice13 / Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits
0 ≤ 2.0.6.1
References
Credits
Craig Smith