Approved changes feed: RSS · Atom

cpe:2.3:a:codepopular:unlimited_theme_addon_for_elementor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodepopular (7aa5bdd2-536a-5c4d-b605-90719e5d989a)
ProductUnlimited Theme Addon For Elementor (56808831-5489-5e90-9cef-3caf6bb13779)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12116 vulnerable 2026-06-08 06:23:51.291886 Unlimited Theme Addon For Elementor and WooCommerce <= 1.2.2 - Authenticated (Contributor+) Post Disclosure
MEDIUM (4.3)
The Unlimited Theme Addon For Elementor and WooCommerce plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.2 via the 'uta-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to.
Published: 2025-01-11T07:21:52.245Z
Updated: 2026-04-08T17:11:38.981Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.