CVE-2024-10329 is a medium severity vulnerability in the Ultimate Bootstrap Elements for Elementor WordPress plugin (up to version 1.4.6). It involves sensitive information exposure (CWE-200) via the 'ube_get_page_templates' function. Authenticated users with Contributor-level privileges or higher can retrieve private template data that should not be accessible to them. The vulnerability does not require user interaction and has a network attack vector. The impact is limited to confidentiality loss without affecting integrity or availability.

An attacker with Contributor-level or higher access can extract sensitive template data that is intended to be private. This exposure could lead to unauthorized disclosure of proprietary or confidential information stored in templates. There is no indication of impact on data integrity or system availability. The vulnerability does not appear to be actively exploited in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict Contributor-level access to trusted users only and monitor for suspicious activity related to template access. Avoid granting unnecessary privileges to users. Follow updates from the vendor for an official patch or mitigation instructions.