PT-2021-15894 · WordPress · The Plus Addons For Elementor Page Builder

Nicolas Vidal · Published 2021-06-14 · Updated 2021-06-18 · CVE-2021-24358

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions The Plus Addons for Elementor Page Builder WordPress plugin versions prior to 4.1.10

Description The issue is related to an Open Redirect problem. It occurs when a redirect parameter on a specifically crafted URL is not validated before redirecting the user to it.

Recommendations For versions prior to 4.1.10, update to version 4.1.10 or later to resolve the issue.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2021-24358

Affected Products

The Plus Addons For Elementor Page Builder

References · 5

• 🔥 https://wpscan.com/vulnerability/fd4352ad-dae0-4404-94d1-11083cb1f44d · Exploit
• https://theplusaddons.com/changelog · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-24358 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-24358 · Security Note
• https://t.me/cvenotify/16250 · Telegram Post