Responsive Addons for Elementor Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure has been identified in the Responsive Addons for Elementor - Free Elementor Addons Plugin and Elementor Templates for WordPress. This issue affects all versions through 1.6.8, specifically within the 'register_user' function. The vulnerability allows authenticated attackers with Contributor-level access and above to extract sensitive data, including usernames and passwords, from users who register using the Edit Login | Registration Form widget, provided that the registered user opens the email notification confirming their registration.

Impact

Exploitation of this vulnerability allows for the unauthorized extraction of sensitive information, specifically usernames and passwords, from users who register through the affected plugin's registration form.

Remediation

Users can update to version 1.6.9 or a newer patched version to address this vulnerability.