CVE-2024-8978

The Essential Addons for Elementor plugin, up to version 6.0.9, is susceptible to a vulnerability that allows authenticated attackers with Contributor-level permissions or higher to access sensitive information such as usernames and passwords of users who register through the Login | Register Form widget. This exposure occurs when users click on registration confirmation emails, enabling attackers to extract this data.

Based on public CVE data (MITRE/NVD).