Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5xfh-rrx5-67m4

Опубликовано: 15 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

The ElementsKit Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.6 via the 'render_raw' function. This can allow authenticated attackers, with Contributor-level permissions and above, to extract sensitive data including private, future, and draft posts.

The ElementsKit Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.6 via the 'render_raw' function. This can allow authenticated attackers, with Contributor-level permissions and above, to extract sensitive data including private, future, and draft posts.

EPSS

Процентиль: 53%
0.00306
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 4.3
nvd
больше 1 года назад

The ElementsKit Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.6 via the 'render_raw' function. This can allow authenticated attackers, with Contributor-level permissions and above, to extract sensitive data including private, future, and draft posts.

EPSS

Процентиль: 53%
0.00306
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200