CVE-2024-12099

Summary

CVE-2024-12099: The Dollie Hub plugin for WordPress, used for building a cloud platform, contains a vulnerability that allows authenticated attackers with Contributor-level access or higher to extract information from password-protected, private, or draft posts. This issue arises from insufficient access restrictions on the 'elementor-template' shortcode, causing potential data exposure. Versions up to 6.2.0 are affected.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.