Access violation vulnerability in Cowidgets – Elementor Addons 1.2.0

The plugin called Cowidgets – Elementor Addons for WordPress has a security issue that affects all versions up to 1.2.0. This is because the ‘ce_template’ shortcode does not have enough restrictions on what posts can be included. As a result, people with Contributor-level access or higher can access private or draft posts created by Elementor, even though they shouldn’t be able to.