Now officially on WordPress.org

CVE Database / CVE-2024-4205

CVE · Medium

CVE-2024-4205 — Premium Addons for Elementor – Elementor Templates, Widgets & MCP Tools [premium-addons-for-elementor] < 4.10.32

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-4205 Premium Addons for Elementor – Elementor Templates, Widgets & MCP Tools [premium-addons-for-elementor] < 4.10.32 Missing Authorization Medium 4.3 < 4.10.32 4.10.32 2024-05-30 —

CVE-2024-4205

The Premium Addons for Elementor plugin through version 4.10.31 contains a flaw where the get_template_content() function fails to verify user permissions before executing. This vulnerability allows any authenticated user with a subscriber role or higher to access sensitive Elementor template information that they should not be able to retrieve. The issue was patched in version 4.10.32.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings