CVE Database /
CVE-2024-24840
CVE · Medium
CVE-2024-24840 — Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons [bdthemes-element-pack-lite] < 5.4.12
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-24840
|
Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons [bdthemes-element-pack-lite] < 5.4.12 |
Missing Authorization |
Medium
4.3
|
< 5.4.12
|
5.4.12 |
2024-02-02 |
—
|
CVE-2024-24840
A broken access control vulnerability exists in Element Pack Addons for Elementor versions before 5.4.12, allowing unauthorized users to perform privileged actions due to missing authorization and authentication checks in certain functions. The flaw was discovered by Abu Hurayra and resolved in version 5.4.12, which should be installed to address the issue. The vulnerability poses a risk of unauthorized functionality execution by low-privilege users.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings