WordPress Plugin Vulnerabilities
ElementsKit Elementor addons < 3.4.1 - Unauthenticated Information Exposure
Description
The plugin is vulnerable to Sensitive Information Exposure due to a missing capability checks on the get_megamenu_content() function. This makes it possible for unauthenticated attackers to view any item created in Elementor, such as posts, pages and templates including drafts, trashed and private items.
Affects Plugins
Fixed in 3.4.1 References
Classification
Type
ACCESS CONTROLS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
stealthcopter
Verified
No
WPVDB ID
Timeline
Publicly Published
2025-02-18 (about 1 year ago)
Added
2025-02-20 (about 1 year ago)
Last Updated
2025-02-20 (about 1 year ago)
WPScan 