CVE-2024-10586

Summary

CVE-2024-10693 is a newly disclosed vulnerability affecting the SKT Addons for Elementor plugin used in WordPress websites. This issue, occurring in the Unfold widget, allows authenticated attackers with Contributor-level access or higher to access information from private or draft posts created by Elementor. The vulnerability arises due to insufficient access restrictions, enabling attackers to extract sensitive data that they should not be privy to. WordPress users are advised to update the plugin to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.