Lucene search

K
cve[email protected]CVE-2024-24843
HistoryFeb 21, 2024 - 7:15 a.m.

CVE-2024-24843

2024-02-2107:15:54
CWE-352
web.nvd.nist.gov
50
cve-2024-24843
csrf
vulnerability
powerpack addons
elementor
powerpack pro
nvd

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Cross-Site Request Forgery (CSRF) vulnerability in PowerPack Addons for Elementor PowerPack Pro for Elementor.This issue affects PowerPack Pro for Elementor: from n/a before 2.10.8.

Affected configurations

Vulners
Node
powerpack_addons_for_elementorpowerpack_pro_for_elementorRange<2.10.8

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "PowerPack Pro for Elementor",
    "vendor": "PowerPack Addons for Elementor",
    "versions": [
      {
        "changes": [
          {
            "at": "2.10.8",
            "status": "unaffected"
          }
        ],
        "lessThan": "2.10.8",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2024-24843