Lucene search

CVE-2024-4887

🗓️ 07 Jun 2024 04:31:15Reported by WordfenceType

The Qi Addons For Elementor plugin for WordPress is vulnerable to Remote File Inclusion via the 'behavior' attribute, allowing authenticated attackers to include remote files on the server

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
WPVulnDB	Qi Addons For Elementor < 1.7.3 - Authenticated (Contributor+) Local File Inclusion	11 Jun 202400:00	–	wpvulndb
Patchstack	WordPress Qi Addons For Elementor Plugin <= 1.7.2 is vulnerable to Local File Inclusion	7 Jun 202400:00	–	patchstack
Cvelist	CVE-2024-4887 Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Local File Inclusion	7 Jun 202403:21	–	cvelist
Vulnrichment	CVE-2024-4887 Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Local File Inclusion	7 Jun 202403:21	–	vulnrichment
NVD	CVE-2024-4887	7 Jun 202404:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 3, 2024 to June 9, 2024)	13 Jun 202415:35	–	wordfence

Nvd

Vulners

Vulnrichment

Node

qodeinteractive qi_addons_for_elementorRange<1.7.3wordpress

[
  {
    "vendor": "qodeinteractive",
    "product": "Qi Addons For Elementor",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.7.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/284daad9-d31e-4d29-ac15-ba293ba9640d
plugins	www.plugins.trac.wordpress.org/changeset/3096634/qi-addons-for-elementor/trunk/inc/admin/helpers/helper.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

07 Jun 2024 04:15Current

7.7High risk

Vulners AI Score7.7

CVSS37.5

EPSS0.02936

SSVC

CWE-706