Unrated severityNVD Advisory· Published Oct 19, 2024· Updated Apr 8, 2026
ElementInvader Addons for Elementor <= 1.2.9 - Authenticated (Contributor+) Information Exposure
CVE-2024-9889
Description
The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.9 via the Page Loader widget. This makes it possible for authenticated attackers, with contributor-level access and above, to view private/draft/password protected posts, pages, and Elementor templates that they should not have access to.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<=1.2.9+ 1 more
- (no CPE)range: <=1.2.9
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.