HackTips.

页面数据均来自于CVE官方,仅调用Api进行查询

1@1042.net

CVE编号CVE-2024-10321
发布日期2025-03-08T08:22:55.687Z
更新日期2025-03-10T16:08:55.753Z
状态PUBLISHED
受影响的供应商themesgrove
受影响的产品All-in-One Addons for Elementor – WidgetKit
描述The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.5.4 in elements/advanced-tab/template/view.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.

参考链接:

Image Additional Image