Security Advisory

CVE-2024-6455

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-07-18 20:32:37

Last updated 2026-04-08 17:02:38

Assigner Wordfence

State PUBLISHED

Description

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.2.0 due to a missing capability checks on ekit_widgetarea_content function. This makes it possible for unauthenticated attackers to view any item created in Elementor, such as posts, pages and templates including drafts, pending and private items.

← Browse all CVEs View on cve.org ↗