Medium severity4.3NVD Advisory· Published Jan 15, 2025· Updated Jun 17, 2026
CVE-2024-13215
CVE-2024-13215
Description
The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.10 via the 'render' function in modules/modal-popup/widgets/modal-popup.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, scheduled, and draft template data.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- cpe:2.3:a:webtechstreet:elementor_addon_elements:*:*:*:*:*:wordpress:*:*Range: <1.14
<=1.13.10+ 1 more
- (no CPE)range: <=1.13.10
- (no CPE)
- wpvibes/Addon Elements for Elementor (formerly Elementor Addon Elements)v5Range: 0
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.