Access violation vulnerability in ElementInvader Addons for Elementor 1.2.9

The ElementInvader Addons plugin for WordPress has a security issue that can expose sensitive information. This vulnerability affects all versions up to and including 1.2.9 and is present in the Page Loader widget. This means that attackers who are logged in with contributor-level access or higher can view private, draft, or password protected posts, pages, and Elementor templates that they shouldn’t be able to access.

Detected in:

ElementInvader Addons for Elementor fixed vulnerable versions: >= * <= 1.2.9

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.