The /elementor/v1/user REST endpoint only requires the edit_posts capability, yet it ran its own get_users() query instead of going through WordPress core's user listing. Any authenticated user with Contributor privileges or above could therefore enumerate every account on the site, pass arbitrary meta_query conditions to probe hidden user meta,... Weiterlesen
Intelligence View
⚡ tsecurity.de Intelligence
Broken Access Control in Elementor User Query REST Endpoint
The /elementor/v1/user REST endpoint only requires the edit_posts capability, yet it ran its own get_users() query instead of going through WordPress core's user listing. Any authenticated user with Contributor privileges or above…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR