The RT Easy Builder – Advanced addons for Elementor plugin for WordPress has a security issue that allows unauthorized activation of plugins. This is because the ajax_activate_plugins() function does not check for the proper permissions. This means that anyone with subscriber-level access or higher can activate plugins without permission.