cve/2024/CVE-2024-8902.md

CVE-2024-8902

Description

The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.8 via the render_column function in modules/data-table/widgets/data-table.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.

POC

Reference

No PoCs from references.

Github

• https://github.com/Arun152k/vulnerability-scanner-api
• https://github.com/Chinzzii/vulnscan
• https://github.com/Ovenoboyo/kai-take-home
• https://github.com/aditikilledar/SecurityScanAPI
• https://github.com/jayvishaalj/JSON_Vulnerability_Scan_Parser
• https://github.com/nilayjain12/github-scanner