The Template Catalog import AJAX handlers in King Addons for Elementor did not check whether the requesting user was allowed to edit the page being overwritten. Any authenticated user able to reach the action could replace the contents of pages belonging to other users. The fix adds a current_user_can(‘edit_post’, $page_id) capability check before the imported template is written.
This vulnerability affects the following application versions:
- King Addons for Elementor 51.1.2
- King Addons for Elementor 51.1.14
- King Addons for Elementor 51.1.35
- King Addons for Elementor 51.1.36
- King Addons for Elementor 51.1.37
- King Addons for Elementor 51.1.38
- King Addons for Elementor 51.1.39
- King Addons for Elementor 51.1.44
- King Addons for Elementor 51.1.45
- King Addons for Elementor 51.1.46
- King Addons for Elementor 51.1.47
- King Addons for Elementor 51.1.49
- King Addons for Elementor 51.1.51
- King Addons for Elementor 51.1.52
- King Addons for Elementor 51.1.53
- King Addons for Elementor 51.1.54
- King Addons for Elementor 51.1.55
- King Addons for Elementor 51.1.56
- King Addons for Elementor 51.1.57
- King Addons for Elementor 51.1.58
- King Addons for Elementor 51.1.59
- King Addons for Elementor 51.1.60
- King Addons for Elementor 51.1.61
- King Addons for Elementor 51.1.62
- King Addons for Elementor 51.1.63
- King Addons for Elementor 51.1.64
- King Addons for Elementor 51.1.65
- King Addons for Elementor 51.1.74
- King Addons for Elementor 51.1.75
- King Addons for Elementor 51.1.76
- King Addons for Elementor 51.1.77
- King Addons for Elementor 51.1.78
- King Addons for Elementor 51.1.79