CVE-2024-10365

Summary

CVE-2024-10365 is a vulnerability affecting The Plus Addons for Elementor plugin for WordPress. This issue, present in versions up to 6.0.3, allows authenticated attackers with Contributor-level access or higher to extract sensitive information. The vulnerability lies within the render function in various widgets, including tp_carousel_anything.php and tp_page_scroll.php. As a result, private, pending, and draft template data can be exposed, posing a significant risk to website security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.