Skip to main content

Premium Addons For Elementor CVE-2024-31278

MEDIUM
Insertion of Sensitive Information Into Sent Data (CWE-201)
2024-04-10 audit@patchstack.com
WordPress Information Disclosure Premium Addons For Elementor Wordpress Plugin Elementor Leap13
4.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
4.3 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

3
CVSS changed
Apr 28, 2026 - 13:22 NVD
6.5 (MEDIUM) 4.3 (MEDIUM)
CVE Published
Apr 10, 2024 - 16:15 nvd
MEDIUM 6.5
CVE Published
Apr 10, 2024 - 16:15 cve.org
MEDIUM 4.3

DescriptionCVE.org

Insertion of Sensitive Information Into Sent Data vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor.This issue affects Premium Addons for Elementor: from n/a through <= 4.10.22.

AnalysisAI

Insertion of Sensitive Information Into Sent Data vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor.10.22. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-201. Insertion of Sensitive Information Into Sent Data vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor.10.22. Affected products include: Leap13 Premium Addons For Elementor.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Premium Addons For Elementor

View all
CVE-2025-14155 MEDIUM POC
5.3 Dec 23

Unauthenticated attackers can access private, draft, and pending template content in Premium Addons for Elementor WordPr
CVE-2024-0376 MEDIUM
6.4 Apr 09

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Wrap
CVE-2024-37922 MEDIUM
6.5 Jul 20

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Add
CVE-2024-32791 MEDIUM
6.5 Apr 24

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Add
CVE-2024-24831 MEDIUM
6.5 Feb 10

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Add
CVE-2024-29106 MEDIUM
6.5 Mar 19

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leap13 Premium Add
CVE-2024-4376 MEDIUM
6.4 May 31

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Fanc
CVE-2024-1242 MEDIUM
6.4 Feb 29

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button onclic
CVE-2024-6495 MEDIUM
6.4 Jul 12

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Anim
CVE-2024-2665 MEDIUM
6.4 Apr 10

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's butt
CVE-2024-0326 MEDIUM
6.4 Mar 13

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Link
CVE-2024-6340 MEDIUM
6.4 Jul 03

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Coun

Same weakness CWE-201 – Insertion of Sensitive Information Into Sent Data

View all
CVE-2026-39912 CRITICAL POC
9.1
CVE-2021-26566 CRITICAL POC
9.0
CVE-2025-60188 HIGH POC
7.5
CVE-2024-43283 MEDIUM POC
5.3
CVE-2020-37150 HIGH POC
7.5
CVE-2024-32825 HIGH POC
7.5
CVE-2025-31134 HIGH POC
7.5
CVE-2026-47717 HIGH POC
7.5

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2024-31278 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy