Access violation vulnerability in 140+ Widgets | Xpro Addons For Elementor – FREE 1.4.6.2

The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress has a security vulnerability that allows people to access sensitive information without permission. This can happen in all versions up to 1.4.6.2 when using the ‘duplicate’ function. This means that attackers who have Contributor-level access or higher can get private information from draft, scheduled, and password protected posts.

Detected in:

140+ Widgets | Xpro Addons For Elementor – FREE fixed vulnerable versions: >= * <= 1.4.6.2
Xpro Addons — 140+ Widgets for Elementor fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.