CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder allows Retrieve Embedded Sensitive Data.This issue affects Elementor Addon Elements: from n/a through <= 1.14.4.
Explanation of Vulnerability in Simple Terms
The Elementor Addon Elements plugin for WordPress contains an information disclosure vulnerability affecting versions up to 1.14.4. An authenticated user with low privileges can read sensitive data they should not have access to. The vulnerability requires network access but no user interaction. Site administrators should update to a version newer than 1.14.4 to remediate.
What an attacker can do
Read sensitive data accessible only to higher-privilege users or the site itself.
Potential impact on your site
Unauthorized disclosure of sensitive information to low-privilege users; data confidentiality compromised.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
