CVE Database /
CVE-2024-10365
CVE · Medium
CVE-2024-10365 — The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder] < 6.0.4
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-10365
|
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce [the-plus-addons-for-elementor-page-builder] < 6.0.4 |
Exposure of Sensitive Information to an Unauthorized Actor |
Medium
4.3
|
< 6.0.4
|
6.0.4 |
2024-11-19 |
—
|
CVE-2024-10365
The Plus Addons for Elementor plugin through version 6.0.3 contains a sensitive information exposure vulnerability in its render functions across multiple widget files including tp_carousel_anything.php and tp_page_scroll.php. Authenticated users with Contributor-level permissions or higher can exploit this flaw to retrieve confidential template data that should remain private, such as pending and draft content. The vulnerability affects all versions prior to 6.0.4.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings