Royal Addons for Elementor Information Exposure Vulnerability

A vulnerability allowing information exposure has been identified in the Royal Addons for Elementor plugin for WordPress, affecting all versions through 1.7.1049. The issue arises in the get_main_query_args() function, where inadequate restrictions allow unauthenticated attackers to access non-public custom post types. This could include sensitive data such as Contact Form 7 submissions or WooCommerce coupons.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information from custom post types, such as Contact Form 7 submissions or WooCommerce coupons.

Remediation

Users are advised to update the Royal Addons for Elementor plugin to version 1.7.1050 or later.