Описание
The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.12.7 via the ajax_eae_post_data function. This can allow unauthenticated attackers to extract sensitive data including post/page ids and titles including those of with pending/draft/future/private status.
Ссылки
- Issue Tracking
- Patch
- Third Party Advisory
- Issue Tracking
- Patch
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.12.7 (включая)
cpe:2.3:a:webtechstreet:elementor_addon_elements:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 46%
0.00234
Низкий
5.3 Medium
CVSS3
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 5.3
github
около 2 лет назад
The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.12.7 via the ajax_eae_post_data function. This can allow unauthenticated attackers to extract sensitive data including post/page ids and titles including those of with pending/draft/future/private status.
EPSS
Процентиль: 46%
0.00234
Низкий
5.3 Medium
CVSS3
Дефекты
NVD-CWE-noinfo