Description
WordPress Plugin Gutenberg & Elementor Templates Importer For Responsive is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently execute various AJAX actions that could reset site data, inject malicious JavaScript in pages, modify theme customizer data, import .xml and .json files, or activate plugins. WordPress Plugin Gutenberg & Elementor Templates Importer For Responsive version 2.2.5 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.2.6 or latest
References
Related Vulnerabilities
WordPress Plugin ULTIMATE VIDEO GALLERY Cross-Site Scripting (1.4)
Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-40407)
WordPress Plugin Elementor Website Builder Cross-Site Scripting (2.7.5)
WordPress Plugin Hide Featured Image Unspecified Vulnerability (1.1)
WordPress Plugin Exit Popups & Onsite Retargeting by OptiMonk Cross-Site Scripting (1.2.5)