The Elementor REST post-query endpoint built its WP_Query arguments with post_status ‘any’ for authenticated requests without restricting results to the requesting user, so any logged-in user (Contributor and above) could enumerate and read the titles and IDs of other authors’ private and draft posts. The fix restricts the query to the current user’s own posts when the user lacks the read_private_posts capability.
This vulnerability affects the following application versions:
- Elementor Website Builder 3.33.0
- Elementor Website Builder 3.33.0-beta1
- Elementor Website Builder 3.33.0-beta2
- Elementor Website Builder 3.33.0-beta3
- Elementor Website Builder 3.33.0-beta4
- Elementor Website Builder 3.33.0-dev1
- Elementor Website Builder 3.33.0-dev2
- Elementor Website Builder 3.33.0-dev3
- Elementor Website Builder 3.33.0-dev4
- Elementor Website Builder 3.33.1
- Elementor Website Builder 3.33.2
- Elementor Website Builder 3.33.3
- Elementor Website Builder 3.33.4
- Elementor Website Builder 3.33.5
- Elementor Website Builder 3.33.6
- Elementor Website Builder 3.34.0
- Elementor Website Builder 3.34.0-beta1
- Elementor Website Builder 3.34.0-beta2
- Elementor Website Builder 3.34.0-beta3
- Elementor Website Builder 3.34.0-dev1
- Elementor Website Builder 3.34.0-dev2
- Elementor Website Builder 3.34.1
- Elementor Website Builder 3.34.2
- Elementor Website Builder 3.34.3
- Elementor Website Builder 3.34.4
- Elementor Website Builder 3.35.0
- Elementor Website Builder 3.35.0-beta1
- Elementor Website Builder 3.35.0-beta2
- Elementor Website Builder 3.35.0-beta3
- Elementor Website Builder 3.35.0-beta4
- Elementor Website Builder 3.35.0-dev1
- Elementor Website Builder 3.35.0-dev2
- Elementor Website Builder 3.35.0-dev3
- Elementor Website Builder 3.35.0-dev4
- Elementor Website Builder 3.35.1
- Elementor Website Builder 3.35.2
- Elementor Website Builder 3.35.3
- Elementor Website Builder 3.35.4
- Elementor Website Builder 3.35.5
- Elementor Website Builder 3.35.6
- Elementor Website Builder 3.35.7
- Elementor Website Builder 3.35.8
- Elementor Website Builder 3.35.9
- Elementor Website Builder 4.0.0
- Elementor Website Builder 4.0.0-beta1
- Elementor Website Builder 4.0.0-beta2
- Elementor Website Builder 4.0.0-beta3
- Elementor Website Builder 4.0.0-beta4
- Elementor Website Builder 4.0.0-beta5
- Elementor Website Builder 4.0.0-dev1
- Elementor Website Builder 4.0.0-dev2
- Elementor Website Builder 4.0.0-dev3
- Elementor Website Builder 4.0.0-dev4
- Elementor Website Builder 4.0.0-dev5
- Elementor Website Builder 4.0.1
- Elementor Website Builder 4.0.2
- Elementor Website Builder 4.0.3
- Elementor Website Builder 4.0.4
- Elementor Website Builder 4.0.5
- Elementor Website Builder 4.0.6
- Elementor Website Builder 4.0.7
- Elementor Website Builder 4.0.9
- Elementor Website Builder 4.1.0
- Elementor Website Builder 4.1.0-beta1
- Elementor Website Builder 4.1.0-dev1
- Elementor Website Builder 4.1.0-dev2
- Elementor Website Builder 4.1.0-dev3
- Elementor Website Builder 4.1.1
- Elementor Website Builder 4.1.2
- Elementor Website Builder 4.1.3
- Elementor Website Builder 4.1.4
- Elementor Website Builder 4.1.5
- Elementor Website Builder 4.2.0
- Elementor Website Builder 4.2.0-beta1
- Elementor Website Builder 4.2.0-beta2
- Elementor Website Builder 4.2.0-dev2
- Elementor Website Builder 4.2.1
- Elementor Website Builder 4.2.2
- Elementor Website Builder 4.2.3