Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-8902

Опубликовано: 12 окт. 2024
Источник: nvd
CVSS3: 4.3
EPSS Низкий

Описание

The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.8 via the render_column function in modules/data-table/widgets/data-table.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:webtechstreet:elementor_addon_elements:*:*:*:*:*:wordpress:*:*
Версия до 1.13.9 (исключая)

EPSS

Процентиль: 44%
0.00212
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 4.3
github
больше 1 года назад

The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.8 via the render_column function in modules/data-table/widgets/data-table.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.

EPSS

Процентиль: 44%
0.00212
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200
NVD-CWE-noinfo