WPZOOM Addons for Elementor Unauthenticated Protected Post Exposure Vulnerability

A vulnerability exists in the WPZOOM Addons for Elementor – Starter Templates & Widgets plugin for WordPress, in all versions through 1.3.2. The issue arises from a missing capability check in the 'ajax_post_grid_load_more' function, allowing unauthenticated attackers to access protected post titles and excerpts (draft, future, pending) that should not be available to them.

Impact

Exploitation of this vulnerability leads to unauthorized access to protected post information, including titles and excerpts of drafts, future, and pending posts.

Remediation

Users can update to version 1.3.3 or a newer patched version to address this vulnerability.