CVE-2024-10319

Summary

CVE-2024-10319 is a newly disclosed vulnerability affecting the 140+ Widgets | Xpro Addons For Elementor plugin used in WordPress websites. This issue allows authenticated attackers with Contributor-level access or higher to extract sensitive information, including private, pending, and draft template data, via the render function present in the file: widgets/content-toggle/layout/frontend.php. The exposure of such data can lead to potential security risks and privacy concerns for WordPress sites using the affected plugin version 1.4.6 and below.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.