PT-2024-11041 · WordPress · Premium Addons For Elementor

Wpscanteam · Published 2024-10-15 · Updated 2024-10-19 · CVE-2021-4445

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Premium Addons for Elementor versions up to, and including, 4.5.1 Premium Addons for Elementor versions prior to 2e5b3608-1dfc-468f-b3ae-12ce7c25ee6c

Description The issue is due to missing capability and nonce checks in the pa dismiss admin notice AJAX action, making it possible for authenticated subscriber+ attackers to change arbitrary options with a restricted value of 1 on vulnerable WordPress sites. This is a high-severity vulnerability that impacts multiple versions of the plugin. Users are urged to update to the latest version immediately to mitigate risks.

Recommendations For versions up to, and including, 4.5.1: Update to the latest version immediately to secure your site. For versions prior to 2e5b3608-1dfc-468f-b3ae-12ce7c25ee6c: Update to the latest version to safeguard your site. As a temporary workaround, consider disabling the pa dismiss admin notice AJAX action until a patch is available.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2021-4445

Affected Products

Premium Addons For Elementor

References · 20

• 🔥 https://wpscan.com/vulnerability/2e5b3608-1dfc-468f-b3ae-12ce7c25ee6c · Exploit
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2590819%40premium-addons-for-elementor&new=2590819%40premium-addons-for-elementor&sfp_email=&sfph_mail= · Patch
• https://osv.dev/vulnerability/CVE-2021-4445 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-4445 · Security Note
• https://twitter.com/transilienceai/status/1847688575598395518 · Twitter Post
• https://twitter.com/transilienceai/status/1847688638986887177 · Twitter Post
• https://twitter.com/transilienceai/status/1847688561170034805 · Twitter Post
• https://twitter.com/transilienceai/status/1847688554341675138 · Twitter Post
• https://twitter.com/transilienceai/status/1847688547907535035 · Twitter Post
• https://twitter.com/transilienceai/status/1847688631604940833 · Twitter Post
• https://wordpress.org/plugins/premium-addons-for-elementor · Note
• https://twitter.com/transilienceai/status/1847688538478813670 · Twitter Post
• https://twitter.com/transilienceai/status/1847688604530676065 · Twitter Post
• https://twitter.com/transilienceai/status/1847688616480313370 · Twitter Post
• https://ithemes.com/blog/wordpress-vulnerability-report-september-2021-part-2/#ib-toc-anchor-2 · Note