CVE-2024-10352

🗓️ 09 Nov 2024 11:38:25Reported by WordfenceType

cve🔗 web.nvd.nist.gov👁 71 Views🌐 WEB

The Magical Addons For Elementor WordPress plugin is vulnerable to Sensitive Information Exposur

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2024-10352	9 Nov 202414:08	–	circl
CNNVD	WordPress plugin Magical Addons For Elementor has a vulnerability related to information leakage.	9 Nov 202400:00	–	cnnvd
Cvelist	CVE-2024-10352 Magical Addons For Elementor <= 1.2.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template	9 Nov 202411:38	–	cvelist
EUVD	EUVD-2024-33058	3 Oct 202520:07	–	euvd
NVD	CVE-2024-10352	9 Nov 202412:15	–	nvd
osv_cve	CVE-2024-10352	9 Nov 202412:15	–	osv_cve
Patchstack	WordPress Magical Addons For Elementor Plugin <= 1.2.4 is vulnerable to Sensitive Data Exposure	9 Nov 202400:00	–	patchstack
Patchstack	WordPress Magical Addons For Elementor plugin <= 1.2.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template vulnerability	9 Nov 202402:55	–	patchstack
Positive Technologies	PT-2024-16211 · WordPress · Magical Addons For Elementor	9 Nov 202400:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2024-10352: Exposure of Sensitive Information to an Unauthorized Actor	9 Nov 202400:00	–	rapid7

NVD

Vulners

Node

wpthemespace magical_addons_for_elementorRange<1.2.5wordpress

[
  {
    "vendor": "nalam-1",
    "product": "Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library )",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.2.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3182827/magical-addons-for-elementor
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/8aa2ba7f-c33d-4e80-b1cf-2d7b2a497f04

Parameter	Position	Path	Description	CWE
action	request body	/wp-admin/admin-ajax.php	The get_content_type function in includes/widgets/content-reveal.php is vulnerable to Sensitive Information Exposure, allowing authenticated users with Contributor-level access to extract sensitive private, pending, and draft template data.	CWE-200

17 Jun 2026 06:55Current

8.2High risk

Vulners AI Score8.2

CVSS 3.14.3

EPSS0.00344

SSVC

CWE-200