Sensitive Information Exposure in ElementsReady Addons for Elementor Plugin

CVE-2024-10356

What is CVE-2024-10356?

The ElementsReady Addons for Elementor plugin for WordPress is identified as vulnerable to sensitive information exposure in all versions up to and including 6.4.8. This vulnerability, located in the inc/Widgets/accordion/output/content.php file, allows authenticated attackers with Contributor-level access and above to exploit the weakness and extract sensitive private, pending, and draft template data. This could lead to unauthorized access to crucial user information, posing significant risks to WordPress sites utilizing this plugin.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References