CVE-2024-12532
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 7, 2025
CWE ID 200
Summary
CVE-2024-12532 is a vulnerability affecting the BWD Elementor Addons plugin for WordPress. This issue, present in all versions up to 4.3.18, allows authenticated attackers with Contributor-level access or higher to extract sensitive information. The sensitive data includes private, pending, and draft template data, posing a significant risk to website security. The vulnerability resides within the widgets/bwdeb-content-switcher.php file.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.