WordPress: Insecure Direct Object Reference in Education Addon for Elementor Plugin

In Education Addon for Elementor plugin for WordPress versions 1.3.1 and prior a medium severity vulnerability CVE-2024-13854 was detected. This vulnerability allows authenticated attackers with Contributor-level access and above to extract information from non-public posts created with Elementor via the naedu_elementor_template shortcode, due to missing validation on a user-controlled key. Currently, there is no fix version for that issue. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-13854.