CVE-2024-12059

Summary

CVE-2024-12059 is a vulnerability affecting the ElementInvader Addons for the Elementor plugin used in WordPress websites. This issue allows authenticated attackers with Contributor-level access or higher to extract sensitive information from the wp_options table through the misuse of the eli_option_value shortcode. The vulnerability may result in the exposure of arbitrary options, posing a potential security risk to affected sites. It is essential for users to update the plugin to a version beyond 1.3.1 to mitigate this exposure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.