Unrated severityNVD Advisory· Published Aug 15, 2024· Updated Apr 8, 2026
ElementsKit Pro <= 3.6.6 - Authenticated (Contributor+) Sensitive Information Exposure
CVE-2024-7063
Description
The ElementsKit Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.6 via the 'render_raw' function. This can allow authenticated attackers, with Contributor-level permissions and above, to extract sensitive data including private, future, and draft posts.
Affected products
3<=3.6.6+ 1 more
- (no CPE)range: <=3.6.6
- (no CPE)range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.