Sensitive Information Exposure in Elementor Addon Elements Plugin for WordPress

CVE-2024-13215

Summary

The Elementor Addon Elements plugin for WordPress is susceptible to a vulnerability that allows authenticated users, with Contributor-level access and higher, to expose sensitive information. The issue exists in the 'render' function located in 'modules/modal-popup/widgets/modal-popup.php', which enables attackers to retrieve private, pending, scheduled, and draft template data. This could lead to potential exploitation of sensitive data, increasing the risk of a data breach.

References