exploitDog

CVE-2024-2966

Опубликовано: 11 апр. 2024

Источник: nvd

CVSS3: 5.3

CVSS3: 7.5

EPSS Низкий

Описание

The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.5.6 via the element_pack_ajax_search function. This makes it possible for unauthenticated attackers to extract sensitive data including password protected post details.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:bdthemes:element_pack:*:*:*:*:lite:wordpress:*:*

Версия до 5.6.0 (исключая)

EPSS

Процентиль: 70%

0.00642

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-cqp7-2728-738c

CVSS3: 5.3

github

почти 2 года назад

The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.5.6 via the element_pack_ajax_search function. This makes it possible for unauthenticated attackers to extract sensitive data including password protected post details.

EPSS

Процентиль: 70%

0.00642

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo