4.3
Medium
CVE-2024-10780 The Restaurant & Cafe Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions…
Description
The Restaurant & Cafe Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.5.9 via the 'narestaurant_elementor_template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Restaurant & Cafe Addon for Elementor 1.5 | earliest → 1.5.9 | No fix stated |
Other CVEs of Restaurant & Cafe Addon for Elementor
The 7 CVEs of Restaurant & Cafe Addon for Elementor →
CVE-2024-13362
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in…
6.1
Medium
CVE-2024-54316
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons…
6.5
Medium
CVE-2023-47826
Missing Authorization vulnerability in NicheAddons Restaurant & Cafe Addon for Elementor allows Exploiting Incorrectly…
6.5
Medium
CVE-2024-51581
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons…
6.5
Medium