PT-2024-26279 · WordPress · Elementskit Elementor Addons

Craig Smith + 1 · Published 2024-05-02 · Updated 2025-01-16 · CVE-2024-3499

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ElementsKit Elementor addons plugin for WordPress versions prior to 3.1.1

Description The issue allows authenticated attackers with contributor-level access and above to include and execute arbitrary files on the server via the generate navigation markup function of the Onepage Scroll module. This enables the execution of any PHP code in those files, potentially bypassing access controls, obtaining sensitive data, or achieving code execution, especially in cases where images and other “safe” file types can be uploaded and included.

Recommendations For versions prior to 3.1.1, update to version 3.1.1 or later to resolve the issue. As a temporary workaround, consider disabling the generate navigation markup function of the Onepage Scroll module until a patch is available.

Fix

Weakness Enumeration

CWE-98

Related Identifiers

CVE-2024-3499

Affected Products

Elementskit Elementor Addons

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-3499 · Security Note
• https://plugins.trac.wordpress.org/changeset/3070789/elementskit-lite · Patch
• https://osv.dev/vulnerability/CVE-2024-3499 · Vendor Advisory
• https://wordfence.com/threat-intel/vulnerabilities/id/6158ec37-a6fb-42f9-bab6-bf547ea28ea0?source=cve · Note
• https://twitter.com/CVEnew/status/1786103023808438687 · Twitter Post
• https://t.me/cvenotify/107629 · Telegram Post