The Templines Elementor Helper Core plugin for WordPress allows an authenticated user with Subscriber-level access or higher to update arbitrary user meta data. By exploiting this flaw, an attacker can change their own role to Administrator, giving them full control of the site. The weakness resides in improper validation of user role changes and is classified as CWE‑269.

The vulnerability affects Templines Elementor Helper Core plugin versions up to and including 2.7. It only applies when the BuddyPress plugin is also installed and activated within the WordPress environment, as the plugin’s meta update functionality is only exposed with BuddyPress active.

The flaw carries a CVSS score of 8.8, indicating high severity. The EPSS score of less than 1% points to a very low likelihood of exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires a valid authenticated session with a Subscriber or higher role; from there, the attacker can elevate privileges by modifying user meta data. The requirement for BuddyPress installation limits the attack surface, making the vector internal and constrained to environments where both plugins coexist.