CVE-2024-10319

The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6 via the render function in widgets/content-toggle/layout/frontend.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.

Score

CVSS 3.1 4.3 Medium

Status

Analyzed - security@wordfence.com

Published

2024-11-05

Last modified

2026-04-08

Weaknesses

CWE-200

Affected products

• Xpro Addons For Elementor (Wpxpro)
• Xpro Addons 140 Widgets For Elementor (Xpro)

References

• https://plugins.trac.wordpress.org/changeset/3179221/xpro-elementor-addons
• https://www.wordfence.com/threat-intel/vulnerabilities/id/382a46c2-9fec-4642-93b0-c06b9ed1c086?source=cve