The ElementsKit Elementor addons plugin for WordPress is...
Moderate severity
Unreviewed
Published
Jul 18, 2024
to the GitHub Advisory Database
•
Updated Jul 18, 2024
Description
Published by the National Vulnerability Database
Jul 18, 2024
Published to the GitHub Advisory Database
Jul 18, 2024
Last updated
Jul 18, 2024
The ElementsKit Elementor addons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.2.0 due to a missing capability checks on ekit_widgetarea_content function. This makes it possible for unauthenticated attackers to view any item created in Elementor, such as posts, pages and templates including drafts, pending and private items.
References