CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for Elementor allows Retrieve Embedded Sensitive Data. This issue affects Happy Addons for Elementor: from n/a through 3.20.8.
Explanation of Vulnerability in Simple Terms
Happy Addons for Elementor versions up to 3.20.8 expose sensitive information through improper access controls. An unauthenticated attacker can read non-public data over the network without user interaction. The vulnerability affects confidentiality but not data integrity or availability. Update to a version newer than 3.20.8.
What an attacker can do
Read sensitive information from the site without authentication.
Potential impact on your site
Visitor data, configuration details, or other non-public information may be exposed to anyone on the internet.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
