Sensitive Information Exposure in All-in-One Addons for Elementor by WordPress

CVE-2024-10321

What is CVE-2024-10321?

The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is exposed to sensitive information leakage, affecting all versions up to and including 2.5.4. The vulnerability exists in the elements/advanced-tab/template/view.php file, allowing authenticated attackers with Contributor-level access or higher to extract sensitive private, pending, and draft template data. This exposure could lead to unauthorized access to sensitive site content, highlighting the need for immediate updates and proper security measures to protect user data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References