CVE-2024-10356

Summary

CVE-2024-10356 is a vulnerability affecting the ElementsReady Addons for Elementor plugin used in WordPress websites. This issue, present in versions up to 6.4.8, exposes sensitive information, including private, pending, and draft template data. Authenticated attackers with Contributor-level access or higher can exploit this vulnerability located in inc/Widgets/accordion/output/content.php, posing a significant risk to the confidentiality of the affected sites.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.