Unlimited Theme Addon For Elementor and WooCommerce Information Exposure Vulnerability

A vulnerability allowing information exposure exists in the Unlimited Theme Addon For Elementor and WooCommerce plugin for WordPress, affecting all versions through 1.2.2. The issue arises from insufficient restrictions on the 'uta-template' shortcode, which allows authenticated attackers with Contributor-level access and above to access data from private or draft posts created with Elementor that they should not be able to.

Impact

Exploitation of this vulnerability could lead to unauthorized access to private or draft post data, allowing attackers to view information they should not have access to.

Remediation

Users can update to version 1.2.3 or a newer patched version to address this vulnerability.