CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
The Restrict for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.7 due to improper restrictions on hidden data that make it accessible through the REST API. This makes it possible for unauthenticated attackers to extract potentially sensitive data from post content.
Explanation of Vulnerability in Simple Terms
Restrict for Elementor versions 1.0.7 and earlier expose sensitive information to unauthenticated attackers over the network. The vulnerability allows an attacker to read data that should be restricted, such as configuration details or user information. No user interaction or special privileges are required to exploit this flaw. Site administrators should update to a version newer than 1.0.7.
What an attacker can do
Read sensitive information from the site without authentication.
Potential impact on your site
Sensitive site data may be exposed to anyone on the internet.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
