Lucene search
+L

1 matches found

WPVulnDB
WPVulnDB
added 2023/11/16 12:0 a.m.28 views

Elementor Addon Elements < 1.12.8 - Unauthenticated Post ID/Tile Disclosure

Description The plugin does not have authorisation in its ajaxeaepostdata function, allowing unauthenticated users to retrieve arbitrary posts/pages such as draft, private etc IDs and tiles...

5.3CVSS7.3AI score0.00927EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder