CVE-2024-43932

The Plus Addons for Elementor plugin through version 5.6.2 contains a missing capability verification in its CMB2 field AJAX search functionality that permits authenticated subscribers and higher-level users to retrieve information they are not authorized to access. The vulnerability exists in the plugin's extension file responsible for handling AJAX search requests, allowing attackers with basic subscriber privileges to bypass intended access restrictions and view sensitive data. This flaw was remedied in version 5.6.3.

Based on public CVE data (MITRE/NVD).