Premium Addons for Elementor Unauthorized Data Access Vulnerability

A vulnerability in the Premium Addons for Elementor plugin for WordPress allows unauthorized access to data. This issue arises from a missing capability check in the 'get_template_content' function, present in all versions up to and including 4.11.53. As a result, unauthenticated attackers can view the content of private, draft, and pending templates.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive template data, including private, draft, and pending content.

Reproduction

The vulnerability can be reproduced by sending an AJAX request to the 'wp_ajax_nopriv_get_elementor_template_content' action. This request must include the 'templateID' parameter, which can be the ID of any private, draft, or pending Elementor template. The absence of a capability check allows the request to be processed, even by unauthenticated users, resulting in the exposure of the requested template content.

Remediation

Users can update the Premium Addons for Elementor plugin to version 4.11.54 or later, where this vulnerability has been addressed.