Arbitrary File Inclusion Vulnerability in The Plus Addons for Elementor Plugin

CVE-2024-2203

What is CVE-2024-2203?

The Plus Addons for Elementor plugin for WordPress is affected by a Local File Inclusion vulnerability that allows authenticated attackers with contributor-level access and above to exploit the Clients widget. This vulnerability enables the inclusion and execution of arbitrary files on the server, which can lead to the execution of malicious PHP code. It poses significant risks, such as bypassing access controls, retrieving sensitive information, and potential code execution via seemingly harmless file uploads, especially images.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References