The ElementsReady Addons for Elementor plugin fails to enforce access restrictions on protected WooCommerce product downloads, allowing unauthenticated users to retrieve any paid downloadable file by setting the "downloadtype" query parameter. This is an authorization flaw, falling under the CWE category of missing authorization control.

All WordPress sites that have installed the ElementsReady Addons for Elementor plugin version 6.7.2 or earlier are vulnerable. Sites using any older or intermediate versions that have not been upgraded remain at risk.

The CVSS score of 5.3 reflects a moderate impact because the flaw requires no authentication but permits direct access to paid content. The EPSS score of less than 1% indicates a very low but nonzero probability of exploitation, and the vulnerability is not listed in CISA’s KEV catalog. Based on the straightforward exploitation path—simply appending a query parameter to a download URL—this vulnerability can be exploited by unauthenticated users; this assessment is inferred from the description.