Elementor Addon Elements WordPress Plugin Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure has been identified in the Elementor Addon Elements plugin for WordPress, affecting all versions through 1.13.10. The issue arises in the 'render' function of the modal-popup widget, where authenticated attackers with Contributor-level access or higher can access private, pending, scheduled, and draft template data.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive template data, including private, pending, scheduled, and draft items.

Remediation

Users are advised to update the Elementor Addon Elements plugin to version 1.14 or later.