CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor.This issue affects Premium Addons for Elementor: from n/a through <= 4.10.22.
Explanation of Vulnerability in Simple Terms
Premium Addons for Elementor versions up to 4.10.22 expose sensitive information to authenticated users. A logged-in attacker with low privileges can read data they should not have access to. The vulnerability requires valid site credentials but no additional user interaction. Update to a version newer than 4.10.22 to resolve this issue.
What an attacker can do
Read sensitive information they should not have access to as a low-privilege user.
Potential impact on your site
Authenticated users with low privileges can access confidential data, risking exposure of private information.
Conditions required to exploit
Attacker must have a valid low-privilege account on the site.
Key dates
External resources
Related vulnerabilities
