CVE-2024-13855

Summary

CVE-2024-13855 is a vulnerability affecting the Prime Addons for Elementor plugin for WordPress. The issue stems from a lack of validation on a user-controlled key in the pae_global_block shortcode. Consequently, authenticated attackers with Contributor-level access and above can gain unauthorized access to information from posts, including drafts, private, password-protected, and restricted posts. This vulnerability applies specifically to posts created with Elementor.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.