CVE-2023-48761

The JetElements For Elementor plugin through version 2.6.13.0 contains a broken access control vulnerability that allows unauthenticated users to perform actions restricted to higher-privilege accounts by exploiting missing authorization checks and nonce validation. Researcher Rafie Muhammad reported this flaw to Patchstack, which affects the plugin's ability to properly verify user permissions before executing sensitive operations. Version 2.6.13.1 and later resolve this security issue.

Based on public CVE data (MITRE/NVD).