WP Clinic
Log in Sign up

CVE · Medium

CVE-2024-56225 — Premium Addons for Elementor – Powerful Elementor Templates & Widgets [premium-addons-for-elementor] < 4.10.57

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-56225 Premium Addons for Elementor – Powerful Elementor Templates & Widgets [premium-addons-for-elementor] < 4.10.57 Missing Authorization Medium 5.4 < 4.10.57 4.10.57 2024-12-19

CVE-2024-56225

The Premium Addons for Elementor plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 4.10.56. This makes it possible for authenticated attackers, with Contributor-level access and above, to perform an unauthorized action.

Source: Wordfence

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.