VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Oct 11, 2024· Updated Jun 17, 2026

CVE-2024-8913

CVE-2024-8913

Description

The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.6.11 via the render function in modules/widgets/tp_accordion.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • WordPress/The Plus Addons For Elementorllm-fuzzy2 versions
    <=5.6.11+ 1 more
    • (no CPE)range: <=5.6.11
    • (no CPE)
  • posimyththemes/The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommercev5
    Range: 0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.