Royal Elementor Addons and Templates, CVE-2023-5922

CVE, Research URL: CVE-2023-5922
Home page URL: Security reports for Royal Elementor Addons and Templates
Application: Royal Elementor Addons and Templates
Published on: Jan 16, 2024
Research Description: The Royal Elementor Addons and Templates WordPress plugin before 1.3.81 does not ensure that users accessing posts via an AJAX action (and REST endpoint, currently disabled in the plugin) have the right to do so, allowing unauthenticated users to access arbitrary draft, private and password protected posts/pages content
Affected versions: Min -, max 1.3.81.
Status: vulnerable