CVE-2023-4723 — Elementor Addon Elements <= 1.12.7 - Missing Authorization to Sensitive Information Exposure
The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.12.7 via the ajax_eae_post_data function. T…
Published: 2023-11-15 · CVSS: 5.3 · CVSS 3.1
The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.12.7 via the ajax_eae_post_data function. This can allow unauthenticated attackers to extract sensitive data including post/page ids and titles including those of with pending/draft/future/private status.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7