The Essential Addons for Elementor plugin for WordPress is not secure in versions up to 4.6.4. An attacker with minimal permissions, like a subscriber, can make changes to settings and install unauthorized plugins. This happens because the plugin has missed checks and revealed security information.