CVE-2024-8899

Summary

CVE-2024-8899 is a newly identified vulnerability affecting the Jeg Elementor Kit plugin used in WordPress websites. This issue, present in all versions up to 2.6.9, allows authenticated attackers with Contributor-level access or higher to extract sensitive information. The vulnerability lies within the render_content function of class-tabs-view.php. Consequently, attackers can gain unauthorized access to private, pending, and draft template data, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.