Medium severity4.3NVD Advisory· Published Dec 12, 2024· Updated Jun 17, 2026
CVE-2024-12059
CVE-2024-12059
Description
The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.1 via the eli_option_value shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract arbitrary options from the wp_options table.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:elementinvader:elementinvader_addons_for_elementor:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:elementinvader:elementinvader_addons_for_elementor:*:*:*:*:*:wordpress:*:*range: <1.3.2
- (no CPE)range: 0
<=1.3.1+ 1 more
- (no CPE)range: <=1.3.1
- (no CPE)
Patches
Vulnerability mechanics
References
2- plugins.trac.wordpress.org/changesetnvdPatch
- www.wordfence.com/threat-intel/vulnerabilities/id/cf7ec469-70b7-4ec2-83df-c788c76730b4nvdThird Party Advisory
News mentions
0No linked articles in our index yet.