The Elements kit Elementor addons plugin for WordPress had a security vulnerability in versions up to 2.9.0 that allowed anyone with a subscriber-level account or higher to dismiss notifications meant only for admins. This vulnerability has been fixed in version 2.9.1, and version 2.9.2 makes sure only admins can view these notifications.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
