PT-2024-35729 · WordPress · Edd Builder+6

Peter Thaleikis

·

Published

2024-08-21

·

Updated

2026-04-08

·

CVE-2024-5335

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin versions up to 1.6.4
Description The issue concerns PHP Object Injection via deserialization of untrusted input through the ultimate store kit compare products cookie. This allows an unauthenticated attacker to inject a PHP object. No POP chain is present in the vulnerable plugin, but if one is present via an additional plugin or theme, it could enable the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
Recommendations For versions up to 1.6.4, update to a version higher than 1.6.4 to resolve the issue. As a temporary workaround, consider restricting access to the ultimate store kit compare products cookie to minimize the risk of exploitation.

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2024-5335

Affected Products

Edd Builder
Elementor Store Builder
Product Grid
Product Table
Ultimate Store Kit Elementor Addons
Woocommerce Builder
Woocommerce Slider