CVE-2024-34384

The Sina Extension for Elementor plugin before version 3.5.2 contains a local file inclusion flaw that permits authenticated users with contributor permissions or higher to load and run arbitrary files from the server. An attacker could exploit this vulnerability to execute PHP code contained within uploaded files, potentially circumventing security restrictions, accessing confidential information, or executing malicious code when files like images have been uploaded to the system.

Based on public CVE data (MITRE/NVD).