Lucene search
PRIOn knowledge basePRION:CVE-2021-24948HistoryJan 10, 2022 - 4:15 p.m.
Design/Logic Flaw
2022-01-1016:15:00
PRIOn knowledge base
www.prio-n.com
4
0.002 Low
EPSS
Percentile
53.5%
The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not validate the qvquery parameter of the tp_get_dl_post_info_ajax AJAX action, which could allow unauthenticated users to retrieve sensitive information, such as private and draft posts
| CPE | Name | Operator | Version |
|---|---|---|---|
| the_plus_addons_for_elementor | lt | 5.0.7 |
Related
cve
cve
CVE-2021-24948
2022-01-10 16:15:08
cvelist
cvelist
wpvulndb
wpvulndb
The Plus Addons for Elementor Pro < 5.0.7 - Sensitive Data Disclosure
2021-12-13 00:00:00
patchstack
patchstack
wpexploit
wpexploit
The Plus Addons for Elementor Pro < 5.0.7 - Sensitive Data Disclosure
2021-12-13 00:00:00
nvd
nvd
CVE-2021-24948
2022-01-10 16:15:08