CVE Database /
CVE-2024-24934
CVE · High
CVE-2024-24934 — Elementor Website Builder – more than just a page builder [elementor] < 3.19.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-24934
|
Elementor Website Builder – more than just a page builder [elementor] < 3.19.1 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
High
8.5
|
< 3.19.1
|
3.19.1 |
2024-02-07 |
—
|
CVE-2024-24934
The Elementor Website Builder plugin before version 3.19.1 contains an arbitrary file deletion vulnerability that was discovered by Rhynorater (Justin Gardner). An attacker could exploit this flaw to remove files from a website, potentially causing critical system files to be deleted and rendering the site inoperable. The issue has been resolved in version 3.19.1 and users should update immediately to prevent exploitation.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings