Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2023-6582
HistoryJan 11, 2024 - 9:15 a.m.

CVE-2023-6582

2024-01-1109:15:49
NVD-CWE-noinfo
[email protected]
web.nvd.nist.gov
20
elementskit
elementor
addons
wordpress
vulnerability
sensitive information exposure
cve-2023-6582
nvd.

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

7.2 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

25.8%

JSON

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.3 via the ekit_widgetarea_content function. This makes it possible for unauthenticated attackers to obtain contents of posts in draft, private or pending review status that should not be visible to the general public. This applies to posts created with Elementor only.

CPENameOperatorVersion
wpmet:elements_kit_elementor_addonswpmet elements kit elementor addonslt3.0.4
wpmet:elements_kit_elementor_addonswpmet elements kit elementor addonseq1.5.1
wpmet:elements_kit_elementor_addonswpmet elements kit elementor addonseq2.1.7
wpmet:elements_kit_elementor_addonswpmet elements kit elementor addonseq2.0.13
wpmet:elements_kit_elementor_addonswpmet elements kit elementor addonseq2.0.7
wpmet:elements_kit_elementor_addonswpmet elements kit elementor addonseq2.5.6
wpmet:elements_kit_elementor_addonswpmet elements kit elementor addonseq1.5.0
wpmet:elements_kit_elementor_addonswpmet elements kit elementor addonseq2.4.0
wpmet:elements_kit_elementor_addonswpmet elements kit elementor addonseq2.3.6
wpmet:elements_kit_elementor_addonswpmet elements kit elementor addonseq1.5.11
Rows per page:
1-10 of 1051

Related

prion 1
cvelist 1
wpvulndb 1
wordfence 1
prion
prion
Design/Logic Flaw
2024-01-11 09:15:00
cvelist
cvelist
CVE-2023-6582
2024-01-11 08:33:11
wpvulndb
wpvulndb
ElementsKit Lite < 3.0.4 - Unauthenticated Sensitive Information Exposure
2024-01-10 00:00:00
wordfence
wordfence
Wordfence Intelligence Weekly WordPress Vulnerability Report (January 8, 2024 to January 14, 2024)
2024-01-18 14:52:18

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

7.2 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

25.8%

JSON
Related for CVE-2023-6582
prion1cvelist1wpvulndb1wordfence1