CVE-2024-10316: Stratum Elementor Widgets Authenticated Sensitive Info Exposure

From this webpage screenshot, the following key vulnerability information can be obtained: 1. Vulnerability Name: Stratum - Elementor Widgets <= 1.4.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates 2. Vulnerability Type: Plugin Vulnerability 3. Plugin Name: Stratum - Elementor Widgets 4. Plugin Version: <= 1.4.4 5. Plugin Status: Patched 6. Fixed Version: 1.4.5 7. Vulnerability Description: The plugin's file allows users with Contributor+ level access to view and modify template data, potentially leading to sensitive information exposure. 8. Vulnerability Rating: CVSS 4.3 (Medium) 9. Public Release Date: November 20, 2024 10. Last Updated Date: November 21, 2024 11. Researcher: Ankit Patel 12. Vulnerability ID: CVE-2024-10316 13. Affected Scope: All versions of the Stratum - Elementor Widgets plugin, including versions <= 1.4.4 14. Impact Level: Medium 15. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 16. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 17. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 18. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 19. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 20. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 21. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 22. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 23. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 24. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 25. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 26. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 27. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 28. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 29. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 30. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 31. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 32. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 33. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 34. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 35. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 36. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 37. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 38. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 39. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 40. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 41. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 42. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 43. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 44. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 45. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 46. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 47. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 48. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 49. Impact Scope: Users with Contributor+ level access can access sensitive information by modifying template data. 50. Impact Scope: Users with Contrib

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2024-10316: Stratum Elementor Widgets Authenticated Sensitive Info Exposure

More from this source