CVE-2023-4723CWE-862

Elementor Addon Elements <= 1.12.7 - Missing Authorization to Sensitive Information Exposure

Medium · published November 15, 2023

CVSS v3.1
5.3
EPSS
1%
Percentile
59.9
In the wild
Unconfirmed
What it is

The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.12.7 via the ajax_eae_post_data function. This can allow unauthenticated attackers to extract sensitive data including post/page ids and titles including those of with pending/draft/future/private status.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00919 · 59.9th percentile
Weakness
CWE-862 · Missing Authorization
Published
2023-11-15T22:32Z
EPSS history
Timeline
  • 15 NOV 22:32Z
    Elementor Addon Elements <= 1.12.7 - Missing Authorization to Sensitive Information Exposure
    cvelistv5