CVE-2021-24948: Posimyth The Plus Addons For Elementor

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not validate the qvquery parameter of the tp_get_dl_post_info_ajax AJAX action, which could allow unauthenticated users to retrieve sensitive information, such as private and draft posts

Affected products

• Posimyth The Plus Addons For Elementor: before 5.0.7 (fixed in 5.0.7)

Published 2022-01-10. Last modified 2026-06-17.