Information Exposure Vulnerability in Elementor Addons by WordPress

CVE-2024-12140

Summary

The Elementor Addons AI Addons plugin, up to version 2.2.1, is susceptible to an information exposure vulnerability. This flaw arises from insufficient validation in the render function, which permits authenticated users with Contributor-level access and above to reveal data from private or draft templates. As a result, such users may access sensitive information they should be barred from, representing a significant risk for site security.

References