Input validation vulnerability in PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) 2.7.13

The PowerPack Addons for Elementor plugin for WordPress contains a security vulnerability present in all versions up to, and including, 2.7.13. This vulnerability makes it possible for unauthenticated attackers to alter the plugin settings without the website administrator’s knowledge or consent. This is due to a missing or incorrect validation of nonce (a kind of digital signature) in the powerpack-lite-for-elementor/classes/class-pp-admin-settings.php file. To exploit this vulnerability, the attacker must be able to trick a website administrator into clicking on a malicious link.