CVE-2024-5614: Piotnet Addons For Elementor <= 2.4.29 - Unauthenticated Sensitive Information Exposure
The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.29 via the 'pafepostslist' function. This makes it possible for unauthenticated attackers to extract sensitive data including titles and excerpts of future, draft, and pending blog posts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-5614?
CVE-2024-5614 is classified as a high severity vulnerability due to the potential for sensitive information exposure.
How do I fix CVE-2024-5614?
To fix CVE-2024-5614, update the Piotnet Addons For Elementor plugin to version 2.4.30 or later.
What types of data can be exposed by CVE-2024-5614?
CVE-2024-5614 can expose sensitive data such as post titles and other related content.
Who is affected by CVE-2024-5614?
All users of the Piotnet Addons For Elementor plugin versions up to and including 2.4.29 are affected by CVE-2024-5614.
Can CVE-2024-5614 be exploited by unauthenticated users?
Yes, CVE-2024-5614 can be exploited by unauthenticated attackers, allowing them to access sensitive information.