Information Exposure Vulnerability in Elementor Plugin for WordPress

CVE-2024-10797

Summary

The Full Screen Menu for Elementor plugin for WordPress is susceptible to an information exposure vulnerability that affects all versions up to and including 1.0.7. This security flaw arises from inadequate restrictions on which posts can be included in the Full Screen Menu Elementor Widget. As a result, authenticated attackers with contributor-level access or higher can gain unauthorized access to sensitive information from private or draft posts created with the Elementor plugin. This vulnerability underscores the critical importance of proper access controls in web applications to prevent data leaks and protect user content.

References