CVE-2024-10321: Themesgrove All-In-One Addons For Elementor

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.5.5 in elements/advanced-tab/template/view.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.

Affected products

• Themesgrove All-In-One Addons For Elementor: up to and including 2.5.4

Published 2025-03-08. Last modified 2026-06-17.