CVE-2024-9025

CVE-2024-9025 affects Sight – Professional Image Gallery and Portfolio (WordPress) up to version 1.1.2. Root cause: missing capability check in the handler_post_title function allows unauthenticated access to private, pending, trashed, and draft post titles. Exploitation requires Elementor to be ...