Information Exposure Vulnerability in Piotnet Addons for Elementor by WordPress

CVE-2024-10775

What is CVE-2024-10775?

The Piotnet Addons For Elementor plugin for WordPress is susceptible to an information exposure vulnerability in all versions up to and including 2.4.32. This vulnerability arises from inadequate restrictions on the 'pafe-template' shortcode, enabling authenticated attackers with Contributor-level access or higher to retrieve data from private or draft posts created by Elementor that they should not be able to access. This potential for unauthorized data extraction poses significant security concerns for users and developers alike.

References