Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8g6h-p8fh-f429

Опубликовано: 25 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.5 via the render function in includes/widgets/htmega_accordion.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.5 via the render function in includes/widgets/htmega_accordion.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.

EPSS

Процентиль: 38%
0.00169
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-1230

Связанные уязвимости

CVSS3: 4.3
nvd
больше 1 года назад

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.5 via the render function in includes/widgets/htmega_accordion.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.

EPSS

Процентиль: 38%
0.00169
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-1230