VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Nov 20, 2024· Updated Jun 17, 2026

CVE-2024-10365

CVE-2024-10365

Description

The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.0.3 via the render function in modules/widgets/tp_carousel_anything.php, modules/widgets/tp_page_scroll.php, and other widgets. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • WordPress/The Plus Addons For Elementorllm-fuzzy2 versions
    <=6.0.3+ 1 more
    • (no CPE)range: <=6.0.3
    • (no CPE)
  • posimyththemes/The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommercev5
    Range: 0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.