Jeg Elementor Kit Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure has been identified in the Jeg Elementor Kit plugin for WordPress, affecting all versions through 2.6.11. This vulnerability arises in the 'expired_data' and 'build_content' functions, enabling authenticated attackers with Contributor-level access and above to access private, pending, scheduled, and draft template data.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive template data, including private, pending, scheduled, and draft content.

Remediation

Users are advised to update the Jeg Elementor Kit plugin to version 2.6.12 or a newer patched version.