Skip to content
Sign in
4.3 Medium

CVE-2024-12062 The Charity Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and…

Description

The Charity Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.3.3 via the 'nacharity_elementor_template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to.

Affected products and versions

Product Affected versions Fixed in
Charity Addon for Elementor 1.3 earliest → 1.3.3 No fix stated

Other CVEs of Charity Addon for Elementor

The 3 CVEs of Charity Addon for Elementor →
CVE-2024-51938 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons… 6.5 Medium CVE-2024-44026 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons… 6.5 Medium
Track this CVE