The vulnerability is a missing authorization flaw in WPDeveloper Essential Addons for Elementor Lite, allowing an attacker to bypass normal access controls. Published as CWE-862, it permits exploitation of incorrectly configured security levels within the plugin, potentially giving unauthorized users elevated access to plugin features or data associated with the WordPress site.

All installations of WPDeveloper Essential Addons for Elementor Lite up to and including version 6.2.4 are affected. The vulnerability applies to the core plugin code distributed under the Lite license for WordPress.

Listed with a CVSS score of 2.7, the vulnerability is assessed as low severity. The EPSS score of less than 1% indicates a very low probability of being exploited in the wild. It is not included in the CISA KEV catalog. The attack vector is not clearly defined in the advisory; it likely involves accessing the plugin’s configuration interface or API endpoints that lack proper authorization checks. Exact requirements for exploitation are not specified in the available data.