The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.12.7 via the ajax_eae_post_data function. This can allow unauthenticated attackers to extract sensitive data including post/page ids and titles including those of with pending/draft/future/private status.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: Wordfence

Published: 2023-11-15T22:32:29.259Z

Updated: 2024-08-02T07:37:59.876Z

Reserved: 2023-09-01T16:03:26.106Z

Link: CVE-2023-4723

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2023-11-15T23:15:09.410

Modified: 2023-11-21T02:30:52.053

Link: CVE-2023-4723

cve-icon Redhat

No data.