WordPress Plugin Vulnerabilities

BuddyPress Builder for Elementor – BuddyBuilder < 1.8.0 - Contributor+ Post Disclosure

Description

The plugin is vulnerable to Information Exposure via the 'elementor-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts crated by Elementor that they should not have access to.

Affects Plugins

Plugin icon
stax-buddy-builder
Fixed in 1.8.0

References

CVE
CVE-2024-10778
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/067dde3a-f2d6-44c6-b64e-c8a850dd4d37

Classification

Type
IDOR
OWASP top 10
A5: Broken Access Control
CWE
CWE-639
CVSS
4.9 (medium)

Miscellaneous

Original Researcher
Francesco Carlucci
Verified
No
WPVDB ID
6f221fb6-95bb-48fd-b39d-9ae23e45fbb6

Timeline

Publicly Published
2024-11-12 (about 1 year ago)
Added
2024-11-12 (about 1 year ago)
Last Updated
2024-11-19 (about 1 year ago)

Other

Published
Title
Published
2025-02-03
Title
JS Help Desk – The Ultimate Help Desk & Support Plugin < 2.8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference
Published
2024-10-16
Title
WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin < 1.0.26 - Insecure Direct Object Reference to Unauthenticated Arbitrary User Password/Email Reset/Account Takeover
Published
2026-03-12
Title
Appointment Booking Calendar < 1.6.10.0 - Insecure Direct Object Reference to Authenticated (Staff+) Sensitive Information Exposure
Published
2025-01-10
Title
Post Duplicator < 2.37 - Authenticated (Contributor+) Protected Post Disclosure
Published
2026-06-15
Title
Static Block <= 2.2 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via Shortcode 'id' Attribute