The Responsive Addons for Elementor – Free Elementor Addons plugin contains a flaw in the register_user function that allows authenticated attackers with Contributor or higher privileges to read usernames and passwords of users who register through the plugin’s Edit Login | Registration Form widget. When the notified user opens the success registration email, the stored credentials are exposed, compromising the confidentiality of all active users.

The vulnerability affects the Responsive Addons for Elementor – Free Elementor Addons Plugin provided by Cyberchimps, for all WordPress installations running version 1.6.8 or earlier.

The CVSS score of 5.7 indicates a moderate impact, but the EPSS score of < 1% suggests that exploitation is unlikely as of now. The plugin is not listed in the CISA KEV catalog. Attacks require that the adversary is already authenticated with Contributor or higher access and that a target user opens the registration success email, which gives the attacker direct read privileges to the secret information.