Sensitive Information Exposure in Elementor Addon Elements Plugin for WordPress

CVE-2024-13215

What is CVE-2024-13215?

The Elementor Addon Elements plugin for WordPress is susceptible to a vulnerability that allows authenticated users, with Contributor-level access and higher, to expose sensitive information. The issue exists in the 'render' function located in 'modules/modal-popup/widgets/modal-popup.php', which enables attackers to retrieve private, pending, scheduled, and draft template data. This could lead to potential exploitation of sensitive data, increasing the risk of a data breach.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References