VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Nov 21, 2024· Updated Jun 17, 2026

CVE-2024-9542

CVE-2024-9542

Description

The Sky Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.1 via the render function in modules/content-switcher/widgets/content-switcher.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft Elementor template data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • WordPress/Sky Addons For Elementorllm-fuzzy2 versions
    <=2.6.1+ 1 more
    • (no CPE)range: <=2.6.1
    • (no CPE)
  • wowdevs/Sky Addons – Elementor Addons with Widgets & Templatesv5
    Range: 0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.