Directory Traversal Vulnerability in Elementor Addon Elements for WordPress

CVE-2024-1358

What is CVE-2024-1358?

The Elementor Addon Elements plugin for WordPress is susceptible to a directory traversal vulnerability affecting all versions up to and including 1.12.12. This vulnerability arises from the render function, which can be exploited by authenticated attackers holding contributor access or higher roles. Successful exploitation allows these attackers to include contents from arbitrary PHP files located on the server, potentially leading to the exposure of sensitive data. Website administrators are advised to mitigate this risk by updating to the latest version of the plugin and reviewing user permissions.

References