Information Exposure Vulnerability in Elementor Addons by WordPress

CVE-2024-12140

What is CVE-2024-12140?

The Elementor Addons AI Addons plugin, up to version 2.2.1, is susceptible to an information exposure vulnerability. This flaw arises from insufficient validation in the render function, which permits authenticated users with Contributor-level access and above to reveal data from private or draft templates. As a result, such users may access sensitive information they should be barred from, representing a significant risk for site security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References