CVE-2024-13841

Summary

CVE-2024-13841 is a vulnerability affecting the Builder Shortcode Extras plugin for WordPress. This issue, present in all versions up to 1.0.0, permits authenticated attackers with Contributor-level access and above to gain unauthorized access to data from private and draft posts created with Elementor. The vulnerability arises due to insufficient restrictions on which posts can be included using the 'bse-elementor-template' shortcode, potentially exposing sensitive information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.