CVE-2024-2966: Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.5.6 - Sensitive Information Exposure via element_pack_ajax_search
The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.5.6 via the elementpackajaxsearch function. This makes it possible for unauthenticated attackers to extract sensitive data including password protected post details.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2966?
CVE-2024-2966 is classified as a vulnerability that allows sensitive information exposure.
How do I fix CVE-2024-2966?
To fix CVE-2024-2966, update the Element Pack Elementor Addons plugin to version 5.5.7 or later.
Who is affected by CVE-2024-2966?
Users of the Element Pack Elementor Addons plugin for WordPress versions up to and including 5.5.6 are affected by CVE-2024-2966.
What components of the Element Pack Elementor Addons are vulnerable in CVE-2024-2966?
The vulnerability affects features including Header Footer, Template Library, Dynamic Grid & Carousel, and Remote Arrows.
What kind of information is exposed by CVE-2024-2966?
CVE-2024-2966 can lead to the exposure of sensitive information through the element_pack_ajax_search function.