Typer Core WordPress Plugin Information Exposure Vulnerability

A vulnerability allowing information exposure exists in the Typer Core plugin for WordPress, affecting all versions through 1.9.6. The issue arises from inadequate restrictions on which posts can be included via the 'elementor-template' shortcode. This flaw enables authenticated attackers with Contributor-level access and above to access and extract data from private or draft posts created with Elementor, which they should not be able to view.

Impact

Exploitation of this vulnerability could lead to unauthorized access to private or draft posts created with Elementor, allowing attackers to extract sensitive information from these posts.

Remediation

No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.