CVE-2024-10357 – Elementor Clever Addons Sensitive Information Exposure

CVE ID : CVE-2024-10357

Published : Oct. 26, 2024, 10:15 a.m. | 1 hour, 1 minute ago

Description : The Clever Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.1 via the getTemplateContent function in src/widgets/class-clever-widget-base.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.

Severity: 4.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE-2024-10357 – Elementor Clever Addons Sensitive Information Exposure