cve/2024/CVE-2024-10312.md
2025-09-29 21:09:30 +02:00

986 B

CVE-2024-10312

Description

The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.4 via the render function in elements/tabs/tabs.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.

POC

Reference

No PoCs from references.

Github