AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-4701

MEDIUM · CVSS 4.3 EPSS 0.75%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-01-10 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2022-4701
Severity
MEDIUM
CVSS
4.3
EPSS
0.75%
WordPress

Original NVD Description

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_required_plugins' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the 'contact-form-7', 'media-library-assistant', or 'woocommerce' plugins if they are installed on the site.