PT-2024-25308 · Unknown · Better Elementor Addons

Ray Wilson · Published 2024-06-04 · Updated 2024-06-04 · CVE-2024-33541

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Better Elementor Addons versions 1.4.1 and earlier

Description The issue is related to a Path Traversal vulnerability, which allows PHP Local File Inclusion. This means an attacker could potentially access files outside the intended directory by manipulating the pathname.

Recommendations For versions 1.4.1 and earlier, update to a version later than 1.4.1 to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-33541

Affected Products

Better Elementor Addons

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-33541 · Security Note
• https://osv.dev/vulnerability/CVE-2024-33541 · Vendor Advisory
• https://patchstack.com/database/vulnerability/better-elementor-addons/wordpress-better-elementor-addons-plugin-1-4-1-local-file-inclusion-vulnerability?_s_id=cve · Note