Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-8899

Опубликовано: 26 нояб. 2024
Источник: nvd
CVSS3: 4.3
EPSS Низкий

Описание

The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.9 via the render_content function in class/elements/views/class-tabs-view.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:jegtheme:jeg_elementor_kit:*:*:*:*:*:wordpress:*:*
Версия до 2.6.10 (исключая)

EPSS

Процентиль: 37%
0.00159
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200
CWE-922

Связанные уязвимости

CVSS3: 4.3
github
около 1 года назад

The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.9 via the render_content function in class/elements/views/class-tabs-view.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.

EPSS

Процентиль: 37%
0.00159
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200
CWE-922