CVE-2024-4779

🗓️ 23 May 2024 10:09:15Reported by WordfenceType

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to SQL Injection via the ‘data[post_ids][0]’ parameter in all versions up to, and including, 1.5.107

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
Vulnrichment	CVE-2024-4779 Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0]	23 May 202409:32	–	vulnrichment
Patchstack	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.107 is vulnerable to SQL Injection	23 May 202400:00	–	patchstack
NVD	CVE-2024-4779	23 May 202410:15	–	nvd
WPVulnDB	Unlimited Elements for Elementor < 1.5.108 - Contributor+ SQLi	23 May 202400:00	–	wpvulndb
Cvelist	CVE-2024-4779 Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0]	23 May 202409:32	–	cvelist
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (May 20, 2024 to May 26, 2024)	30 May 202415:23	–	wordfence

Nvd

Vulners

Node

unlimited-elements unlimited_elements_for_elementorRange<1.5.108wordpress

[
  {
    "vendor": "unitecms",
    "product": "Unlimited Elements For Elementor (Free Widgets, Addons, Templates)",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.5.107",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3090199/unlimited-elements-for-elementor/trunk/provider/functions_wordpress.class.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/b155f8ca-9d09-47d7-a7c2-7744df029c19

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 May 2024 10:15Current

8.7High risk

Vulners AI Score8.7

CVSS38.8

EPSS0.00247

SSVC

CWE-89