Security Advisory

CVE-2023-4723

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-11-15 22:32:29
Last updated 2026-04-08 17:05:26
Assigner Wordfence
CVSS score 5.3
State PUBLISHED

Description

The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.12.7 via the ajax_eae_post_data function. This can allow unauthenticated attackers to extract sensitive data including post/page ids and titles including those of with pending/draft/future/private status.