CVE-2024-10312: Exclusive Addons for Elementor <= 2.7.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.4 via the render function in elements/tabs/tabs.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10312?
CVE-2024-10312 has a medium severity level due to the potential for sensitive information exposure.
How do I fix CVE-2024-10312?
To fix CVE-2024-10312, update the Exclusive Addons for Elementor plugin to version 2.7.5 or later.
Who is affected by CVE-2024-10312?
CVE-2024-10312 affects users of the Exclusive Addons for Elementor plugin for WordPress, specifically those using versions up to 2.7.4.
What type of vulnerability is CVE-2024-10312?
CVE-2024-10312 is classified as a sensitive information exposure vulnerability.
Can unauthenticated users exploit CVE-2024-10312?
No, only authenticated users with Contributor-level access can exploit CVE-2024-10312.