Medium severity5.3NVD Advisory· Published Jul 18, 2024· Updated Jun 17, 2026

CVE-2024-6455

Description

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.2.0 due to a missing capability checks on ekit_widgetarea_content function. This makes it possible for unauthenticated attackers to view any item created in Elementor, such as posts, pages and templates including drafts, pending and private items.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/ElementsKit Elementor addonsllm-fuzzy
Range: <=3.2.0
roxnor/ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementorv5
Range: 0

Patches

Vulnerability mechanics

References

www.wordfence.com/threat-intel/vulnerabilities/id/7c336530-09b2-4ead-923f-f1a6266e3e8envdThird Party Advisory
plugins.trac.wordpress.org/browser/elementskit-lite/tags/3.2.0/modules/controls/widget-area-utils.phpnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000