CVE-2024-8913

Summary

CVE-2024-8913 is a newly disclosed vulnerability affecting the The Plus Addons for Elementor plugin used in WordPress sites. This issue, present in versions up to 5.6.11, allows authenticated attackers with Contributor-level access or higher to extract sensitive data through the render function in tp_accordion.php. At risk are private, pending, and draft template data, posing a significant security concern for WordPress sites using this plugin. It is crucial for users to update to the latest plugin version as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.