Sensitive Information Exposure in Elementor Addon Elements for WordPress
CVE-2023-4723
5.3MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 15 November 2023
What is CVE-2023-4723?
The Elementor Addon Elements plugin for WordPress is susceptible to sensitive information exposure through the ajax_eae_post_data function. This vulnerability affects all versions up to and including 1.12.7, allowing unauthorized users to access and retrieve sensitive information such as post and page IDs and titles, even for content marked as pending, draft, future, or private. Proper security measures should be enforced to mitigate this risk and protect sensitive data from being compromised.
Affected Version(s)
Addon Elements for Elementor (formerly Elementor Addon Elements) 0 <= 1.12.7