CVE-2024-7063

Name of the Vulnerable Software and Affected Versions ElementsKit Pro plugin for WordPress versions up to, and including, 3.6.6

Description The issue allows authenticated attackers with Contributor-level permissions and above to extract sensitive data, including private, future, and draft posts, via the render raw function. This can lead to sensitive information exposure.

Recommendations For versions up to, and including, 3.6.6, update to a version later than 3.6.6 to resolve the issue. As a temporary workaround, consider restricting access to the render raw function until a patch is available.