CVE-2024-10365

Summary

CVE-2024-10365 is a vulnerability affecting The Plus Addons for Elementor plugin for WordPress, specifically versions up to and including 6.0.3. The issue lies in the render function found in files like tp_carousel_anything.php and tp_page_scroll.php, and other widgets. This vulnerability enables authenticated attackers with Contributor-level access or higher to extract sensitive information, including private, pending, and draft template data, making it crucial for users to update the plugin to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.