Premium Addons for Elementor < 4.10.23 - Authenticated (Contributor+) Sensitive Information Exposure

2024-04-1200:00:00

wpscan.com

wordpress

vulnerable

authenticated

sensitive information

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%

JSON

Description The Premium Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.22. This makes it possible for authenticated attackers, with contributor-level access and above, to extract sensitive user or configuration data.

CPENameOperatorVersion
eq4.10.23

CPE	Name	Operator	Version
		eq	4.10.23

References

patchstack.com/database/vulnerability/premium-addons-for-elementor/wordpress-premium-addons-for-elementor-plugin-4-10-22-sensitive-data-exposure-vulnerability