CVE-2023-2189

Name of the Vulnerable Software and Affected Versions Elementor Addons, Widgets and Enhancements – Stax plugin for WordPress versions up to, and including, 1.4.3

Description The issue is related to unauthorized modification of data due to a missing capability check on the toggle widget function. This allows authenticated attackers with subscriber-level permissions and above to enable or disable Elementor widgets.

Recommendations For versions up to, and including, 1.4.3, update to a version that includes a fix for the missing capability check on the toggle widget function. As a temporary workaround, consider restricting access to the toggle widget function to prevent unauthorized modification of data.