CVE-2021-4447

CVE-2021-4447 is a privilege escalation vulnerability affecting the Essential Addons for Elementor WordPress plugin, versions up to and including 4.6.4. It allows authenticated attackers with Elementor page builder access to create a registration form that assigns new users administrator privileges, enabling them to register as an administrative user. This vulnerability carries a high CVSS score of 8.8, indicating a low attack complexity and the potential for complete compromise of confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.