Elementor Addon Elements, CVE-2024-8902

CVE, Research URL: CVE-2024-8902
Home page URL: Security reports for Elementor Addon Elements
Application: Elementor Addon Elements
Published on: Oct 12, 2024
Research Description: The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.8 via the render_column function in modules/data-table/widgets/data-table.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.
Affected versions: Min -, max 1.13.9.
Status: vulnerable