Lucene search

CVE-2024-5179

🗓️ 06 Jun 2024 02:54:15Reported by WordfenceType

The Cowidgets – Elementor Addons plugin for WordPress is vulnerable to Local File Inclusion via 'item_style' and 'style' parameters, allowing authenticated attackers to execute arbitrary files on the server

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
Vulnrichment	CVE-2024-5179 Cowidgets – Elementor Addons <= 1.1.1 - Authenticated (Contributor+) Local File Inclusion	6 Jun 202402:03	–	vulnrichment
WPVulnDB	Cowidgets – Elementor Addons <= 1.1.1 - Authenticated (Contributor+) Local File Inclusion	5 Jun 202400:00	–	wpvulndb
Cvelist	CVE-2024-5179 Cowidgets – Elementor Addons <= 1.1.1 - Authenticated (Contributor+) Local File Inclusion	6 Jun 202402:03	–	cvelist
NVD	CVE-2024-5179	6 Jun 202402:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 3, 2024 to June 9, 2024)	13 Jun 202415:35	–	wordfence

Nvd

Vulners

Node

codeless cowidgets_elementor_addonsRange<1.2.0wordpress

[
  {
    "vendor": "codelessthemes",
    "product": "Cowidgets – Elementor Addons",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.1.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/ebd6acc9-b7df-4cf8-a211-1e39f3abcf79
plugins	www.plugins.trac.wordpress.org/browser/cowidgets-elementor-addons/trunk/inc/widgets-manager/widgets/content/class-ce-staff-carousel.php
plugins	www.plugins.trac.wordpress.org/browser/cowidgets-elementor-addons/trunk/inc/widgets-manager/widgets/content/class-ce-posts-carousel.php
plugins	www.plugins.trac.wordpress.org/browser/cowidgets-elementor-addons/trunk/inc/widgets-manager/widgets/content/class-ce-post-navigation.php
plugins	www.plugins.trac.wordpress.org/browser/cowidgets-elementor-addons/trunk/inc/widgets-manager/widgets/content/class-ce-testimonial-carousel.php
plugins	www.plugins.trac.wordpress.org/browser/cowidgets-elementor-addons/trunk/inc/widgets-manager/widgets/content/class-ce-portfolio-grid.php
plugins	www.plugins.trac.wordpress.org/browser/cowidgets-elementor-addons/trunk/inc/widgets-manager/widgets/content/class-ce-posts-grid.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Jun 2024 02:15Current

8.9High risk

Vulners AI Score8.9

CVSS38.8

EPSS0.00865

SSVC

CWE-22