CVE-2024-7417

—

CVSS 3.1

4.3 medium

EPSS

<1%p35

Published

Oct 17, 2024 (Oct 17, 2024)

Modified

Jun 17, 2026

Description

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.3.986 via the data_fetch. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract data from password protected posts.

Vendors: royal-elementor-addons
Products: royal elementor addons
Ecosystems: WordPress
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.