Sensitive Information Exposure in Elementor Addons

CVE-2024-2966

What is CVE-2024-2966?

The Element Pack Elementor Addons plugin for WordPress is susceptible to a vulnerability that allows unauthenticated attackers to access sensitive information. This issue arises from the element_pack_ajax_search function, which can be exploited to retrieve confidential data, including details of password-protected posts. The vulnerability affects all versions of the plugin up to and including version 5.5.6, highlighting the importance of updating to secure user data against potential threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References