| Package | Affected versions | Patched versions |
|---|---|---|
| the plus addons for elementor | < 5.0.7 | 5.0.7 |
The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not validate the qvquery parameter of the tp_get_dl_post_info_ajax AJAX action, which could allow unauthenticated users to retrieve sensitive information, such as private and draft posts
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free