Sensitive Information Exposure in Elementor Plugin

CVE-2024-10329

What is CVE-2024-10329?

The Ultimate Bootstrap Elements for Elementor plugin for WordPress is known to have a vulnerability that permits authenticated users with Contributor-level access and above to extract sensitive data. This weakness arises from the 'ube_get_page_templates' function, which can inadvertently expose private template contents. Proper access controls and security measures must be in place to mitigate the risks associated with this vulnerability and prevent unauthorized data access.

References