Sensitive Information Exposure in ElementsKit Elementor Addons Plugin for WordPress

CVE-2023-6582

Summary

The ElementsKit Elementor addons plugin for WordPress is affected by a vulnerability that enables unauthorized users to access sensitive information. Specifically, the flaw exists in the ekit_widgetarea_content function, which allows unauthenticated attackers to retrieve the contents of posts in draft, private, or pending review statuses. This exposure pertains solely to posts created using the Elementor page builder, thereby compromising the confidentiality of unpublished content that should remain hidden from public view.

References