Information Exposure Vulnerability in RRAddons for Elementor Plugin

CVE-2024-11915

What is CVE-2024-11915?

The RRAddons for Elementor plugin for WordPress is susceptible to information exposure due to inadequate restrictions on included posts via the Popup block. Authenticated attackers with Contributor-level access or higher can exploit this vulnerability, allowing them to retrieve sensitive data from private or draft posts that they should normally be unable to access. This flaw poses a significant risk to the confidentiality of user content, necessitating immediate attention and remediation.

References