A plugin called Boostify Header Footer Builder for Elementor on WordPress has a problem that could allow people to change data without permission. This issue is caused by a function called create_bhf_post not having the right security check. This means that anyone who is logged in and has at least subscriber-level access can make new pages or posts with any information they want.