CVE-2024-10365

Summary

CVE-2024-10365 is a vulnerability affecting The Plus Addons for Elementor plugin for WordPress. This issue, present in versions up to 6.0.3, allows authenticated attackers with Contributor-level access or higher to extract sensitive information. The exposure occurs through the render function in files like tp_carousel_anything.php and tp_page_scroll.php, as well as other widgets. As a result, attackers can access private, pending, and draft template data, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.