CVE-2024-10329: falha de média gravidade em g5theme Ultimate Bootstrap Elements for…
Ultimate Bootstrap Elements for Elementor <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.3epss 0.4%
The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6 via the 'ube_get_page_templates' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the contents of templates that are private.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
g5theme · Ultimate Bootstrap Elements for ElementorCVEs relacionadas — g5theme Ultimate Bootstrap Elements for…
No mesmo produto, das mais perigosas para as menos.
CVE-2025-32672HIGHWordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.9 - Local File Inclusion VulnerabilityEPSS 1.0%CVE-2024-1398MEDIUMUltimate Bootstrap Elements for Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.5%CVE-2024-2132MEDIUMUltimate Bootstrap Elements for Elementor <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image WidgetEPSS 0.3%