CVE-2024-3927

🗓️ 22 May 2024 07:13:15Reported by WordfenceType

The Element Pack plugin for WordPress up to version 5.6.3 allows unauthenticated attackers to bypass form submission admin email restriction using a +value

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
patchstack	WordPress Element Pack Elementor Addons Plugin <= 5.6.3 is vulnerable to Bypass Vulnerability	22 May 202400:00	–	patchstack
nvd	CVE-2024-3927	22 May 202407:15	–	nvd
wpvulndb	Element Pack Elementor Addons < 5.6.4 - Form Submission Admin Email Bypass	22 May 202400:00	–	wpvulndb
vulnrichment	CVE-2024-3927 Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.3 - Form Submission Admin Email Bypass	22 May 202406:50	–	vulnrichment
cvelist	CVE-2024-3927 Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.3 - Form Submission Admin Email Bypass	22 May 202406:50	–	cvelist
wordfence	Wordfence Intelligence Weekly WordPress Vulnerability Report (May 20, 2024 to May 26, 2024)	30 May 202415:23	–	wordfence

Nvd

Vulners

Node

bdthemes element_packRange<5.6.4litewordpress

[
  {
    "vendor": "bdthemes",
    "product": "Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows)",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "5.6.3",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3089154
plugins	www.plugins.trac.wordpress.org/browser/bdthemes-element-pack-lite/trunk/modules/contact-form/module.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/3a703fc4-6c61-442e-a637-515e9f501575

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 May 2024 07:15Current

5.7Medium risk

Vulners AI Score5.7

CVSS35.3

EPSS0.0029

SSVC