The vulnerability is a missing authorization flaw in the LeapWorx Premium Addons for Elementor plugin that allows an attacker to exploit incorrectly configured access control security settings. This flaw enables the exploitation of privileged functions within the plugin, potentially allowing the attacker to read, modify, or delete plugin‑specific content or settings. The weakness is identified as CWE‑862, which governs improper authorization controls.

Any WordPress site running LeapWorx Premium Addons for Elementor plugin version 4.11.110 or earlier is affected. The vulnerability is confined to the plugin itself and does not impact the core WordPress installation unless the plugin APIs are integrated with other site functionality. The affected product is LeapWorx Premium Addons for Elementor, a commercial add‑on for the Elementor page builder.

The CVSS score of 5.3 indicates moderate severity. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, suggesting limited known exploitation activity. The likely attack vector is web‑based and may require authenticated access to the admin interface or the plugin’s configuration pages. An attacker who can utilize the plugin’s privileged actions could potentially compromise the confidentiality, integrity, or availability of the site content.