Lucene search
WpvulndbWPVDB-ID:E2AA7FA0-D9C4-4A41-9479-350EA2BA375AHistoryApr 01, 2024 - 12:00 a.m.
Essential Addons for Elementor < 5.9.14 - Unauthenticated Private/Draft Posts Access
2024-04-0100:00:00
wpscan.com
19
elementor
vulnerable
sensitive information
unauthenticated access
private posts
draft posts
software
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
6.5
Confidence
High
EPSS
0
Percentile
9.0%
Description The plugin is vulnerable to Sensitive Information Exposure via the load_more function. This can allow unauthenticated attackers to extract sensitive data including private and draft posts.
Related
cve
cve
CVE-2024-2974
2024-04-09 19:15:38
nvd
nvd
CVE-2024-2974
2024-04-09 19:15:38
cvelist
cvelist
CVE-2024-2974
2024-04-09 18:59:00
vulnrichment
vulnrichment
CVE-2024-2974
2024-04-09 18:59:00
openvas
openvas
wordfence
wordfence
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
6.5
Confidence
High
EPSS
0
Percentile
9.0%
Related for WPVDB-ID:E2AA7FA0-D9C4-4A41-9479-350EA2BA375A