4.3
Moyenne
CVE-2024-10780 The Restaurant & Cafe Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions…
Description
The Restaurant & Cafe Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.5.9 via the 'narestaurant_elementor_template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Restaurant & Cafe Addon for Elementor 1.5 | premières → 1.5.9 | Pas de correctif indiqué |
Autres CVE de Restaurant & Cafe Addon for Elementor
Les 7 CVE de Restaurant & Cafe Addon for Elementor →
CVE-2024-13362
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in…
6.1
Moyenne
CVE-2024-54316
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons…
6.5
Moyenne
CVE-2023-47826
Missing Authorization vulnerability in NicheAddons Restaurant & Cafe Addon for Elementor allows Exploiting Incorrectly…
6.5
Moyenne
CVE-2024-51581
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons…
6.5
Moyenne