CVE-2024-0910

· MEDIUMModified

← All CVEs

CVSS v3.1

5.3

EPSS

0.45%

Published

Jun 5, 2024

Modified

Apr 8, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Restrict for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.7 due to improper restrictions on hidden data that make it accessible through the REST API. This makes it possible for unauthenticated attackers to extract potentially sensitive data from post content.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-200

Affected Products (1)

restrict · restrict_for_elementor (up to 1.0.8)vulnerable

References (5)

https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3104418%40restrict-for-elementor&new=3104418%40restrict-for-elementor

https://wordpress.org/plugins/restrict-for-elementor/

Product

https://www.wordfence.com/threat-intel/vulnerabilities/id/14993c04-7fe3-4c42-a605-2e431df14d79?source=cve

Third Party Advisory