PT-2024-30446 · Elementor · Void Elementor Post Grid Addon

João Pedro S Alcântara · Published 2024-08-19 · Updated 2024-08-19 · CVE-2024-43281

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Void Elementor Post Grid Addon for Elementor Page builder versions prior to 2.3

Description The issue affects the Void Elementor Post Grid Addon for Elementor Page builder, allowing PHP Local File Inclusion due to a Path Traversal vulnerability. This vulnerability poses risks such as data theft and Remote Code Execution (RCE).

Recommendations For versions prior to 2.3, update to a version that includes the fix for this issue as soon as possible and check for signs of exploitation. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-43281

Affected Products

Void Elementor Post Grid Addon

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-43281 · Security Note
• https://twitter.com/VulmonFeeds/status/1825641169776165188 · Twitter Post
• https://twitter.com/CVEnew/status/1825591353079677388 · Twitter Post
• https://twitter.com/oktsec/status/1825763273267876165 · Twitter Post
• https://patchstack.com/database/vulnerability/void-elementor-post-grid-addon-for-elementor-page-builder/wordpress-void-elementor-post-grid-addon-for-elementor-page-builder-plugin-2-3-local-file-inclusion-vulnerability?_s_id=cve · Note
• https://t.me/cvedetector/3539 · Telegram Post