CVE-2024-13832: Ultra Addons Lite for Elementor <= 1.1.8 - Authenticated (Contributor+) Restricted Post Disclosure
The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.8 via the 'utelementor' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-13832?
CVE-2024-13832 has a medium severity rating due to its potential for information exposure.
What versions are affected by CVE-2024-13832?
CVE-2024-13832 affects all versions of the Ultra Addons Lite for Elementor plugin up to and including version 1.1.8.
How do I fix CVE-2024-13832?
You can fix CVE-2024-13832 by updating the Ultra Addons Lite for Elementor plugin to the latest version.
What type of vulnerability is CVE-2024-13832?
CVE-2024-13832 is categorized as an Information Exposure vulnerability.
Who can exploit CVE-2024-13832?
Authenticated users may exploit CVE-2024-13832 due to insufficient restrictions on included posts.