Unrated severityNVD Advisory· Published Oct 15, 2024· Updated Apr 8, 2026
Elementor <= 3.23.5 - Authenticated (Contributor+) Basic Information Exposure via get_image_alt Function
CVE-2024-6757
Description
The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 3.23.5 via the get_image_alt function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract either excerpt data or titles of private or password-protected posts.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <=3.23.5
- elemntor/Elementor Website Builder – more than just a page builderv5Range: 0
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.