3 matches found
CVE-2024-12584
creationtimestamp| type| source ---|---|--- 2025-01-08 06:43:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113791376022240183 2025-01-08 06:47:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113791390788597629 2025-01-08 07:15:50+00:00| seen|...
CVE-2024-12584 140+ Widgets | Xpro Addons For Elementor – FREE <= 1.4.6.2 - Authenticated (Contributor+) Post Disclosure via Post Duplication
The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6.2 via the 'duplicate' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to...
CVE-2024-12584
CVE-2024-12584 affects the WordPress plugin 140+ Widgets | Xpro Addons For Elementor – FREE. The vulnerability is in the duplicate function and affects all versions up to 1.4.6.2, allowing authenticated attackers with Contributor-level access or higher to expose sensitive information from draft, ...