Sensitive Information Exposure in ElementsKit Elementor Addons Plugin by WordPress

CVE-2025-0968

What is CVE-2025-0968?

The ElementsKit Elementor addons plugin is susceptible to sensitive information exposure due to inadequate capability checks on the get_megamenu_content() function. This vulnerability allows unauthenticated attackers to access and retrieve any content generated within Elementor, including posts, pages, templates, drafts, trashed items, and private content. All versions up to and including 3.4.0 are affected, making it critical for users to update the plugin to protect against unauthorized information disclosure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References