Sky Addons for Elementor <=2.6.1 Authenticated Sensitive Information Exposure

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: Sky Addons for Elementor <= 2.6.1 - Authenticated (Contributor+) Sensitive Information Exposure via Content Switcher Widget Elementor Template 2. Affected Software: Sky Addons for Elementor plugin 3. Affected Version Range: <= 2.6.1 4. Vulnerability Type: Sensitive Information Exposure 5. Vulnerability Rating: - CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - CVSS 4.3: Medium 6. Public Release Date: November 20, 2024 7. Last Updated Date: November 21, 2024 8. Researcher: Nishiv 9. Fix Status: Fixed 10. Recommended Fix: Upgrade to version 2.6.2 or later, which includes the fix. 11. Reference Link: plugins.trac.wordpress.org 12. Vulnerability Description: The plugin allows users with Contributor+ permissions to access and extract Elementor template data via the rendering function in module/content-switcher/widgets/content-switcher.php. 13. Vulnerability Details: - Features such as Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blog, and Video Gallery may be affected. 14. Copyright and Licensing Information: - Copyright and licensing information for Defiant Inc. and MITRE Corporation. 15. Wordfence Intelligence Features: - Provides free access to the WordPress vulnerability database and API integration. - Offers 24/365 response support. This information helps users understand the vulnerability in detail and take appropriate actions to remediate and prevent exploitation.

Goal Reached Thanks to every supporter — we hit 100%!

Sky Addons for Elementor <=2.6.1 Authenticated Sensitive Information Exposure

More from this source