Vulnerability Description
The Happy Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.12.2 via the Content Switcher widget. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including private, draft, and pending Elementor templates.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Wedevs | Happy Addons For Elementor | < 3.12.3 |
Related Weaknesses (CWE)
References
- https://plugins.trac.wordpress.org/browser/happy-elementor-addons/trunk/widgets/Product
- https://plugins.trac.wordpress.org/changeset/3154460/Patch
- https://www.wordfence.com/threat-intel/vulnerabilities/id/9f1078b8-f458-46a6-998Third Party Advisory
FAQ
What is CVE-2024-8801?
CVE-2024-8801 is a vulnerability with a CVSS score of 4.3 (MEDIUM). The Happy Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.12.2 via the Content Switcher widget. This makes it possible...
How severe is CVE-2024-8801?
CVE-2024-8801 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-8801?
Check the references section above for vendor advisories and patch information. Affected products include: Wedevs Happy Addons For Elementor.