Lucene search

K
cvelistPatchstackCVELIST:CVE-2024-24840
HistoryMar 23, 2024 - 2:45 p.m.

CVE-2024-24840 WordPress Element Pack Elementor Addons plugin <= 5.4.11 - Broken Access Control on Duplicate Post vulnerability

2024-03-2314:45:02
CWE-862
Patchstack
www.cve.org
6
cve-2024-24840
broken access control
duplicate post
missing authorization
bdthemes element pack

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5

Confidence

High

EPSS

0

Percentile

9.0%

Missing Authorization vulnerability in BdThemes Element Pack Elementor Addons.This issue affects Element Pack Elementor Addons: from n/a through 5.4.11.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "bdthemes-element-pack-lite",
    "product": "Element Pack Elementor Addons",
    "vendor": "BdThemes",
    "versions": [
      {
        "changes": [
          {
            "at": "5.4.12",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "5.4.11",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2024-24840