CVE-2021-24948CWE-200

The Plus Addons for Elementor Pro < 5.0.7 - Sensitive Data Disclosure

published January 10, 2022

CVSS
—
EPSS
2%
Percentile
78.5
In the wild
Unconfirmed
What it is

The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not validate the qvquery parameter of the tp_get_dl_post_info_ajax AJAX action, which could allow unauthenticated users to retrieve sensitive information, such as private and draft posts

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01815 · 78.5th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2022-01-10T15:30Z
EPSS history
Timeline
  • 10 JAN 15:30Z
    The Plus Addons for Elementor Pro < 5.0.7 - Sensitive Data Disclosure
    cvelistv5