Sensitive Information Exposure in HT Event Plugin for Elementor by WordPress

CVE-2024-13216

What is CVE-2024-13216?

The HT Event Manager Plugin for Elementor is susceptible to a vulnerability due to the improper handling of data in its 'render' function found within /includes/widgets/htevent_sponsor.php. This issue allows authenticated attackers with Contributor-level access and higher to access sensitive information, including private, pending, scheduled, and draft templates. This risk highlights the need for prompt updates to the plugin to mitigate potential data leaks.

References