Lucene search

CVE-2024-2619

🗓️ 16 May 2024 21:08:16Reported by WordfenceType

Elementor WordPress builder HTML Injection CVE-2024-261

Reporter	Title	Published	Views	Family All 6
WPVulnDB	Elementor Header & Footer Builder < 1.6.27 - Authenticated (Author+) HTML Injection	17 May 202400:00	–	wpvulndb
Vulnrichment	CVE-2024-2619 Elementor Header & Footer Builder <= 1.6.26 - Authenticated (Author+) HTML Injection	16 May 202420:31	–	vulnrichment
Patchstack	WordPress Elementor – Header, Footer & Blocks Template Plugin <= 1.6.26 is vulnerable to Content Injection	16 May 202400:00	–	patchstack
NVD	CVE-2024-2619	16 May 202421:16	–	nvd
Cvelist	CVE-2024-2619 Elementor Header & Footer Builder <= 1.6.26 - Authenticated (Author+) HTML Injection	16 May 202420:31	–	cvelist
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (May 13, 2024 to May 19, 2024)	23 May 202415:00	–	wordfence

Nvd

Vulners

Node

brainstormforce elementor_header_\&_footer_builderRange<1.6.27wordpress

[
  {
    "vendor": "brainstormforce",
    "product": "Elementor Header & Footer Builder",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.6.26",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/header-footer-elementor/tags/1.6.25/admin/class-hfe-admin.php
plugins	www.plugins.trac.wordpress.org/browser/header-footer-elementor/tags/1.6.25/admin/class-hfe-admin.php
plugins	www.plugins.trac.wordpress.org/changeset
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/689eb95b-2f72-4aa4-9f21-6ae186346061

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 May 2024 21:16Current

6.6Medium risk

Vulners AI Score6.6

CVSS35 - 5.4

EPSS0.00053

SSVC

CWE-79