Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-2974

Опубликовано: 09 апр. 2024
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 5.9.13 via the load_more function. This can allow unauthenticated attackers to extract sensitive data including private and draft posts.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:wpdeveloper:essential_addons_for_elementor:*:*:*:*:lite:wordpress:*:*
Версия до 5.9.14 (исключая)

EPSS

Процентиль: 60%
0.00392
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-922

Связанные уязвимости

CVSS3: 5.3
github
почти 2 года назад

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 5.9.13 via the load_more function. This can allow unauthenticated attackers to extract sensitive data including private and draft posts.

EPSS

Процентиль: 60%
0.00392
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-922