WordPress Exclusive Addons CVE-2024-10312 Authenticated Sensitive Information Exposure

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: Exclusive Addons for Elementor <= 2.7.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates 2. Vulnerability Description: - Describes a sensitive information exposure vulnerability present in all versions of the Exclusive Addons for Elementor plugin (including <= 2.7.4). - The vulnerability allows attackers with Contributor+ privileges to extract sensitive private, unpublished, and draft template data via Elementor templates. 3. Vulnerability Rating: - CVSS Score: 3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - CVSS Score: 4.3 (Medium) 4. Public Release Date: October 28, 2024 5. Last Updated Date: October 29, 2024 6. Researcher: Ankit Patel 7. Vulnerability ID: - CVE ID: CVE-2024-10312 - CVSS Score: 4.3 (Medium) 8. Affected Versions: <= 2.7.4 9. Fixed Version: 2.7.5 10. Exploitation: - Describes how attackers can exploit the vulnerability to extract sensitive data. - The vulnerability exists in the file . 11. Reference Links: - plugins.trac.wordpress.org 12. Vulnerability Details: - Provides detailed information about the vulnerability, including software type, software slug, whether it has been fixed, and remediation advice. 13. Copyright and Licensing Information: - Includes copyright and licensing terms from Defiant Inc. and MITRE Corporation. 14. Exploit Tool: - Provides a download link for the exploit tool. 15. Exploit Example: - Includes exploit code and examples. 16. Remediation Advice: - Recommends updating to version 2.7.5 or higher. 17. Impact Scope: - Affects all versions of WordPress plugins/themes. 18. Impact Severity: - Severity level: Medium. 19. Affected Entities: - Affected users: WordPress plugin/theme users. 20. Impact Scope: - Affects all versions of WordPress plugins/themes. 21. Impact Severity: - Severity level: Medium. 22. Affected Entities: - Affected users: WordPress plugin/theme users. 23. Impact Scope: - Affects all versions of WordPress plugins/themes. 24. Impact Severity: - Severity level: Medium. 25. Affected Entities: - Affected users: WordPress plugin/theme users. 26. Impact Scope: - Affects all versions of WordPress plugins/themes. 27. Impact Severity: - Severity level: Medium. 28. Affected Entities: - Affected users: WordPress plugin/theme users. 29. Impact Scope: - Affects all versions of WordPress plugins/themes. 30. Impact Severity: - Severity level: Medium. 31. Affected Entities: - Affected users: WordPress plugin/theme users. 32. Impact Scope: - Affects all versions of WordPress plugins/themes. 33. Impact Severity: - Severity level: Medium. 34. Affected Entities: - Affected users: WordPress plugin/theme users. 35. Impact Scope: - Affects all versions of WordPress plugins/themes. 36. Impact Severity: - Severity level: Medium. 37. Affected Entities: - Affected users: WordPress plugin/theme users. 38. Impact Scope: - Affects all versions of WordPress plugins/themes. 39. Impact Severity: - Severity level: Medium. 40. Affected Entities: - Affected users: WordPress plugin/theme users. 41. Impact Scope: - Affects all versions of WordPress plugins/themes. 42. Impact Severity: - Severity level: Medium. 43. Affected Entities: - Affected users: WordPress plugin/theme users. 44. Impact Scope: - Affects all versions of WordPress plugins/themes. 45. Impact Severity: - Severity level: Medium. 46. Affected Entities: - Affected users: WordPress plugin/theme users. 47. Impact Scope: - Affects all versions of WordPress plugins/themes. 48. Impact Severity: - Severity level: Medium. 49. Affected Entities: - Affected users: WordPress plugin/theme users. 50. Impact Scope: - Affects all versions of WordPress plugins/themes. 51. Impact Severity: - Severity level: Medium. 52. Affected Entities: - Affected users: WordPress plugin/theme users. 53. Impact Scope: - Affects all versions of WordPress plugins/themes. 54. Impact Severity: - Severity level: Medium. 55. Affected Entities: - Affected users: WordPress plugin/theme users. 56. Impact Scope: - Affects all versions of WordPress plugins/themes. 57. Impact Severity: - Severity level: Medium. 58. Affected Entities: - Affected users: WordPress plugin/theme users. 59. Impact Scope: - Affects all versions of WordPress plugins/themes. 60. Impact Severity: - Severity level: Medium. 61. Affected Entities: - Affected users: WordPress plugin/theme users. 62. Impact Scope: - Affects all versions of WordPress plugins/themes. 63. Impact Severity: - Severity level: Medium. 64. Affected Entities: - Affected users: WordPress plugin/theme users. 65. Impact Scope: - Affects all versions of WordPress plugins/themes. 66. Impact Severity: - Severity level: Medium. 67. Affected Entities: - Affected users: WordPress plugin/theme users. 68. Impact Scope: - Affects all versions of WordPress plugins/themes. 69. Impact Severity: - Severity level: Medium. 70. Affected Entities: - Affected users: WordPress plugin/theme user

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Exclusive Addons CVE-2024-10312 Authenticated Sensitive Information Exposure

More from this source