Sensitive Information Exposure Vulnerability in Qi Addons For Elementor Plugin

CVE-2024-9530

Summary

The Qi Addons for Elementor plugin for WordPress exhibits a vulnerability allowing sensitive information exposure due to improper handling of private templates. Authenticated users with Contributor-level access and above can exploit this weakness, enabling them to extract sensitive data contained within these templates. This poses a significant risk to users relying on this plugin for managing their website's content, as it potentially exposes confidential information to unauthorized parties.

References