Access violation vulnerability in Popularis Extra 1.2.7

The Popularis Extra plugin for WordPress has a security vulnerability that allows people to see sensitive information. This can happen in all versions of the plugin, including version 1.2.7. The issue is caused by the ‘elementor-template’ shortcode, which does not have enough restrictions on which posts can be seen. This means that someone with Contributor-level access or higher can access private or draft posts created through Elementor, even if they are not supposed to.