Aller au contenu
Se connecter
4.3 Moyenne

CVE-2024-12062 The Charity Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and…

Description

The Charity Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.3.3 via the 'nacharity_elementor_template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to.

Produits et versions touchés

Produit Versions touchées Corrigé en
Charity Addon for Elementor 1.3 premières → 1.3.3 Pas de correctif indiqué

Autres CVE de Charity Addon for Elementor

Les 3 CVE de Charity Addon for Elementor →
CVE-2024-51938 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons… 6.5 Moyenne CVE-2024-44026 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons… 6.5 Moyenne
Suivre cette CVE