Description
The Elementor Website Builder WordPress plugin before 4.1.4 does not properly check user permissions before returning post data through one of its REST endpoints, allowing authenticated users with Contributor-level access and above to retrieve the title, body and metadata of private posts, private pages and drafts authored by other users (including administrators).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Elementor Website Builder | < 4.1.4 | 4.1.4 |
References
- https://wpscan.com/vulnerability/d0d6b840-790d-45a3-9b0d-8f77a229e8a9/ exploit vdb-entry technical-description