Sensitive Information Exposure in ElementsKit Elementor Addons Plugin by WordPress

CVE-2025-0968

What is CVE-2025-0968?

The ElementsKit Elementor addons plugin is susceptible to sensitive information exposure due to inadequate capability checks on the get_megamenu_content() function. This vulnerability allows unauthenticated attackers to access and retrieve any content generated within Elementor, including posts, pages, templates, drafts, trashed items, and private content. All versions up to and including 3.4.0 are affected, making it critical for users to update the plugin to protect against unauthorized information disclosure.

References