CVE-2024-10696

MEDIUM

UltraAddons - Elementor Addons < 1.1.8 - Authenticated Insecure Direct Object Reference via show_template

Title source: llm

Description

The UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.8 via the show_template due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributor-level access and above, to expose the contents of draft, private, and pending posts.

References (3)

Core 3

Core References

https://plugins.trac.wordpress.org/changeset/3221044/

Product

https://plugins.trac.wordpress.org/browser/ultraaddons-elementor-lite/trunk/inc/wp/shortcode.php#L16

Third Party Advisory

https://www.wordfence.com/threat-intel/vulnerabilities/id/719de6e5-29c5-4303-981d-81840939a0b1?source=cve

Scores

CVSS v3 4.3

EPSS 0.0048

EPSS Percentile 37.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-639

Status published

Products (2)

codeastrology/ultraaddons < 1.1.8

codersaiful/UltraAddons for Elementor < 1.1.8

Published Nov 21, 2024

Tracked Since Feb 18, 2026