CVE Database /
CVE-2024-43996
CVE · Medium
CVE-2024-43996 — ElementsKit [elementskit] < 3.6.8
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-43996
|
ElementsKit [elementskit] < 3.6.8 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
Medium
6.5
|
< 3.6.8
|
3.6.8 |
2024-08-29 |
—
|
CVE-2024-43996
ElementsKit Pro versions up to 3.6.0 contain a path traversal vulnerability that permits PHP local file inclusion attacks. The flaw stems from inadequate restriction of file path access, enabling attackers to read arbitrary files from the server. This vulnerability has been fixed in version 3.6.8 and later releases.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings