Elementor Restaurant & Cafe Addon Information Disclosure Vulnerability (CVE-2024-10780)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: Restaurant & Cafe Addon for Elementor <= 1.5.9 - Authenticated (Contributor+) Post Disclosure 2. Vulnerability Type: Authorization Bypass Through User-Controlled Key 3. CVSS Score: 4.3 (Medium) 4. Public Release Date: November 27, 2024 5. Update Date: November 28, 2024 6. Researcher: Francesco Carlucci 7. Affected Versions: <= 1.5.9 8. Fixed Version: 1.6.0 9. Vulnerability Description: The plugin in versions <= 1.5.9 contains an information disclosure vulnerability. Through the 'narestaurant_elementor_template' shortcode, it allows users with Contributor+ privileges to access private or draft posts. 10. Remediation Advice: Update to version 1.6.0 or higher. 11. Vulnerability ID: CVE-2024-10780 12. Vulnerability Disclosure Status: Publicly Disclosed 13. Vulnerability Disclosure Date: November 27, 2024 14. Vulnerability Disclosure Date: November 28, 2024 15. Vulnerability Researcher: Francesco Carlucci 16. Vulnerability Description: The plugin in versions <= 1.5.9 contains an information disclosure vulnerability. Through the 'narestaurant_elementor_template' shortcode, it allows users with Contributor+ privileges to access private or draft posts. 17. Vulnerability Disclosure Status: Publicly Disclosed 18. Vulnerability Disclosure Date: November 27, 2024 19. Vulnerability Disclosure Date: November 28, 2024 20. Vulnerability Researcher: Francesco Carlucci 21. Vulnerability Description: The plugin in versions <= 1.5.9 contains an information disclosure vulnerability. Through the 'narestaurant_elementor_template' shortcode, it allows users with Contributor+ privileges to access private or draft posts. 22. Vulnerability Disclosure Status: Publicly Disclosed 23. Vulnerability Disclosure Date: November 27, 2024 24. Vulnerability Disclosure Date: November 28, 2024 25. Vulnerability Researcher: Francesco Carlucci 26. Vulnerability Description: The plugin in versions <= 1.5.9 contains an information disclosure vulnerability. Through the 'narestaurant_elementor_template' shortcode, it allows users with Contributor+ privileges to access private or draft posts. 27. Vulnerability Disclosure Status: Publicly Disclosed 28. Vulnerability Disclosure Date: November 27, 2024 29. Vulnerability Disclosure Date: November 28, 2024 30. Vulnerability Researcher: Francesco Carlucci 31. Vulnerability Description: The plugin in versions <= 1.5.9 contains an information disclosure vulnerability. Through the 'narestaurant_elementor_template' shortcode, it allows users with Contributor+ privileges to access private or draft posts. 32. Vulnerability Disclosure Status: Publicly Disclosed 33. Vulnerability Disclosure Date: November 27, 2024 34. Vulnerability Disclosure Date: November 28, 2024 35. Vulnerability Researcher: Francesco Carlucci 36. Vulnerability Description: The plugin in versions <= 1.5.9 contains an information disclosure vulnerability. Through the 'narestaurant_elementor_template' shortcode, it allows users with Contributor+ privileges to access private or draft posts. 37. Vulnerability Disclosure Status: Publicly Disclosed 38. Vulnerability Disclosure Date: November 27, 2024 39. Vulnerability Disclosure Date: November 28, 2024 40. Vulnerability Researcher: Francesco Carlucci 41. Vulnerability Description: The plugin in versions <= 1.5.9 contains an information disclosure vulnerability. Through the 'narestaurant_elementor_template' shortcode, it allows users with Contributor+ privileges to access private or draft posts. 42. Vulnerability Disclosure Status: Publicly Disclosed 43. Vulnerability Disclosure Date: November 27, 2024 44. Vulnerability Disclosure Date: November 28, 2024 45. Vulnerability Researcher: Francesco Carlucci 46. Vulnerability Description: The plugin in versions <= 1.5.9 contains an information disclosure vulnerability. Through the 'narestaurant_elementor_template' shortcode, it allows users with Contributor+ privileges to access private or draft posts. 47. Vulnerability Disclosure Status: Publicly Disclosed 48. Vulnerability Disclosure Date: November 27, 2024 49. Vulnerability Disclosure Date: November 28, 2024 50. Vulnerability Researcher: Francesco Carlucci 51. Vulnerability Description: The plugin in versions <= 1.5.9 contains an information disclosure vulnerability. Through the 'narestaurant_elementor_template' shortcode, it allows users with Contributor+ privileges to access private or draft posts. 52. Vulnerability Disclosure Status: Publicly Disclosed 53. Vulnerability Disclosure Date: November 27, 2024 54. Vulnerability Disclosure Date: November 28, 2024 55. Vulnerability Researcher: Francesco Carlucci 56. Vulnerability Description: The plugin in versions <= 1.5.9 contains an information disclosure vulnerability. Through the 'narestaurant_elementor_template' shortcode, it allows users with Contributor+ privileges to access private or draft posts. 57. Vulnerability Disclosure Stat

Goal Reached Thanks to every supporter — we hit 100%!

Elementor Restaurant & Cafe Addon Information Disclosure Vulnerability (CVE-2024-10780)

More from this source