CVE-2024-4471

🗓️ 23 May 2024 13:15:09Reported by [email protected]Type

The 140+ Widgets | Best Addons For Elementor – FREE for WordPress is vulnerable to PHP Object Injection in versions up to 1.4.3.1 via deserialization of untrusted input in the 'export_content' function

Reporter	Title	Published	Views	Family All 11
CNNVD	WordPress plugin 140+ Widgets Best Addons For Elementor–FREE 安全漏洞	23 May 202400:00	–	cnnvd
CVE	CVE-2024-4471	23 May 202412:43	–	cve
Cvelist	CVE-2024-4471 140+ Widgets \| Best Addons For Elementor – FREE <= 1.4.3.1 - Authenticated (Contributor+) PHP Object Injection	23 May 202412:43	–	cvelist
EUVD	EUVD-2024-44086	3 Oct 202520:07	–	euvd
Patchstack	WordPress 140+ Widgets \| Best Addons For Elementor – FREE plugin <= 1.4.3.1 - Authenticated (Contributor+) PHP Object Injection vulnerability	24 May 202405:34	–	patchstack
Patchstack	WordPress Xpro Elementor Addons Plugin <= 1.4.3.1 is vulnerable to PHP Object Injection	24 May 202400:00	–	patchstack
Positive Technologies	PT-2024-31215 · WordPress · The 140+ Widgets	23 May 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-4471	4 Feb 202523:59	–	redhatcve
Vulnrichment	CVE-2024-4471 140+ Widgets \| Best Addons For Elementor – FREE <= 1.4.3.1 - Authenticated (Contributor+) PHP Object Injection	23 May 202412:43	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (May 20, 2024 to May 26, 2024)	30 May 202415:23	–	wordfence

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/5c517278-9d2a-4ef6-bf0e-a62f6b00dd20
plugins	www.plugins.trac.wordpress.org/changeset/3090127/
plugins	www.plugins.trac.wordpress.org/browser/xpro-elementor-addons/trunk/libs/demo-export/classes/class-demo-export-admin.php

17 Jun 2026 08:01Current

8.1High risk

Vulners AI Score8.1

CVSS 3.18

EPSS0.006

CWE-502