Builder Shortcode Extras WordPress Plugin Information Exposure Vulnerability

A vulnerability allowing information exposure exists in the Builder Shortcode Extras WordPress plugin, specifically in versions through 1.0.0. The issue arises within the 'bse-elementor-template' shortcode, where inadequate restrictions allow authenticated attackers with Contributor-level access and above to access data from private and draft Elementor posts that should be off-limits.

Impact

Exploitation of this vulnerability could lead to unauthorized access to private and draft posts created with Elementor, allowing attackers to view content they should not have access to.