Information Exposure Vulnerability in RRAddons for Elementor Plugin
CVE-2024-11915

4.3MEDIUM

Key Information:

Vendor

Wordpress
Status
Rraddons For Elementor
Vendor
CVE Published:
11 January 2025

What is CVE-2024-11915?

The RRAddons for Elementor plugin for WordPress is susceptible to information exposure due to inadequate restrictions on included posts via the Popup block. Authenticated attackers with Contributor-level access or higher can exploit this vulnerability, allowing them to retrieve sensitive data from private or draft posts that they should normally be unable to access. This flaw poses a significant risk to the confidentiality of user content, necessitating immediate attention and remediation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

RRAddons for Elementor * <= 1.1.0

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://wordpress.org/plugins/rrdevs-for-elementor/

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ankit Patel
JSON
.