Beta

Report

Qi Addons For Elementor <= 1.8.0 is vulnerable to Sensitive Information Exposure vulnerability

Contributor
Published
2024-10-21

The Qi Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.0 via private templates. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the contents of templates that are private.

CVSS

Score:4.3

Severity:Medium

Version: 1.8.0

There is a patch available in v1.8.1 and we strongly recommend you update to this version as soon as possible.