CVE-2024-48045

The Happy Addons for Elementor plugin through version 3.12.3 contains a vulnerability in the validate_reqeust() function that fails to verify user permissions, allowing authenticated users with contributor privileges or higher to access templates that are in draft, private, or password-protected status. This authorization bypass exposes sensitive template content to unauthorized viewing by low-privileged account holders. The vulnerability is resolved in version 3.12.4 and later.

Based on public CVE data (MITRE/NVD).