Description
WordPress Plugin Ultimate Addons for Elementor is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently create subscriber-level users, even if registration is disabled. WordPress Plugin Ultimate Addons for Elementor version 1.24.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.24.2 or latest