Skip to content

CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-23523

WordPress Elementor Pro plugin <= 3.19.2 - Contributor+ Arbitrary User Meta Data Retrieval vulnerability

Read JSON ↗CVE.org ↗

Status: Published
Published: 2024-03-16
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Elementor Pro.This issue affects Elementor Pro: from n/a through 3.19.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Elementor Elementor Pro

Default version status: unaffected

n/a to ≤ 3.19.2affected

References

https://patchstack.com/database/vulnerability/elementor-pro/wordpress-elementor-pro-plugin-3-19-2-contributor-arbitrary-user-meta-data-retrieval-vulnerability?_s_id=cve ↗