Medium severity4.3NVD Advisory· Published Nov 21, 2024· Updated Jun 17, 2026

CVE-2024-10316

Description

The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.4 in includes/templates/content-switcher.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.

Affected products

WordPress/Stratum Elementor Widgetsinferred
Range: <=1.4.4
Package: https://wordpress.org/plugins/stratum-elementor-widgets
WordPress/Wot Elementor Widgetsllm-fuzzy
Range: <=1.4.4
Package: https://wordpress.org/plugins/wot-elementor-widgets

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/changeset/3189021nvd
www.wordfence.com/threat-intel/vulnerabilities/id/0a1cf60b-47bd-4e67-8fe4-6cf46809f2b2nvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000