CVE-2024-24840
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Mar 23, 2024
Updated: Mar 25, 2024
CWE ID 862
Summary
CVE-2024-24840 is a newly disclosed vulnerability affecting the BdThemes Element Pack Elementor Addons. This missing authorization issue grants unauthorized access to certain functionalities within the add-on, allowing attackers to manipulate settings and data. The vulnerability exists in all Element Pack Elementor Addons versions from n/a through 5.4.11. Users are urged to upgrade to the latest patched version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share