Lucene search
K

5 matches found

Patchstack
Patchstack
added 2025/12/31 12:0 a.m.1 views

WordPress Premium Addons for Elementor plugin <= 4.11.53 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'get_template_content' vulnerability

Missing Authorization to Unauthenticated Sensitive Information Exposure via 'gettemplatecontent' vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin Premium Addons for Elementor versions = 4.11.53...

5.3CVSS5.5AI score0.0049EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/12/23 12:30 p.m.1 views

EUVD-2025-204785

The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'gettemplatecontent' function in all versions up to, and including, 4.11.53. This makes it possible for...

5.3CVSS4.8AI score0.0049EPSS
Exploits0References5
NVD
NVD
added 2025/12/23 10:15 a.m.2 views

CVE-2025-14155

The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'gettemplatecontent' function in all versions up to, and including, 4.11.53. This makes it possible for...

5.3CVSS0.0049EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/12/23 9:19 a.m.1 views

CVE-2025-14155 Premium Addons for Elementor <= 4.11.53 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'get_template_content'

The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'gettemplatecontent' function in all versions up to, and including, 4.11.53. This makes it possible for...

5.3CVSS4.9AI score0.0049EPSS
Exploits0References5
CVE
CVE
added 2025/12/23 9:19 a.m.12 views

CVE-2025-14155

CVE-2025-14155 affects Premium Addons for Elementor – Powerful Elementor Templates & Widgets (WordPress). Root cause: missing capability check in get_template_content across versions up to 4.11.53, allowing unauthenticated users to view content of private/draft templates. Impact: unauthenticated ...

5.3CVSS4.9AI score0.0049EPSS
In wildExploits0References5Affected Software1
Rows per page
Query Builder