UpHeron
All vulnerabilities

Servers and applications

CVE-2024-8494

The Elementor Website Builder Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.25.10 via the 'elementor-template' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the content of Private, Pending, and Draft Templates. The vulnerability was…

Severity
Medium 6.5
Published
30 Jan 2025
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
3.25.11
Sources
NVD

Affected software

SoftwareAffected versions
ElementorServers and applications · cpe:a:elementor:website_builder
  • Every version before 3.25.11

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-8494
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-8494