Now officially on WordPress.org

CVE Database / CVE-2024-24883

CVE · Medium

CVE-2024-24883 — Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons [bdthemes-prime-slider-lite] < 3.11.11

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-24883 Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons [bdthemes-prime-slider-lite] < 3.11.11 Missing Authorization Medium 4.3 < 3.11.11 3.11.11 2024-02-05 —

CVE-2024-24883

The Prime Slider Addons for Elementor plugin versions before 3.11.11 contain a broken access control vulnerability where certain functions lack proper authorization, authentication, or nonce verification checks. This flaw allows unauthenticated or low-privileged users to perform actions that should be restricted to higher-privileged accounts. The vulnerability has been resolved in version 3.11.11 and later.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings