Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-7417

Опубликовано: 17 окт. 2024
Источник: nvd
CVSS3: 4.3
EPSS Низкий

Описание

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.3.986 via the data_fetch. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract data from password protected posts.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:royal-elementor-addons:royal_elementor_addons:*:*:*:*:*:wordpress:*:*
Версия до 1.3.986 (включая)

EPSS

Процентиль: 57%
0.00347
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 4.3
github
больше 1 года назад

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.3.986 via the data_fetch. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract data from password protected posts.

EPSS

Процентиль: 57%
0.00347
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200
NVD-CWE-noinfo