CVE-2024-12116
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 11, 2025
CWE ID 639
Summary
CVE-2024-12116: This vulnerability affects the Unlimited Theme Addon for Elementor and WooCommerce plugin used in WordPress. The issue lies in the insufficient restrictions on the 'uta-template' shortcode, exposing information from private or draft posts created by Elementor. Authenticated attackers with Contributor-level access or higher can exploit this Information Exposure vulnerability, gaining unauthorized access to data they should not be privy to. All versions up to and including 1.2.1 are impacted.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.