CVE-2023-4723 in Elementor Addon Elements Plugin

Zusammenfassung

von MITRE • 16.11.2023

The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.12.7 via the ajax_eae_post_data function. This can allow unauthenticated attackers to extract sensitive data including post/page ids and titles including those of with pending/draft/future/private status.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Zuständig: Wordfence
• Reservieren: 01.09.2023
• Veröffentlichung: 16.11.2023
• Moderieren: akzeptiert
• Eintrag: VDB-245506
• CPE: bereit
• CWE: CWE-862 (bestätigt)
• CVSS: 5.3 (NVD)
• EPSS: 0.00927
• KEV: nein
• Aktivitäten: very low
• Sektor: Hostingprovider

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-4723
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-4723
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-4723/