Theme Builder For Elementor, CVE-2024-10782

CVE, Research URL: CVE-2024-10782
Home page URL: Security reports for Theme Builder For Elementor
Application: Theme Builder For Elementor
Published on: Nov 21, 2024
Research Description: The Theme Builder For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.2 via the 'elementor-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to.
Affected versions: Min -, max 1.2.3.
Status: vulnerable