WordPress Droit Elementor Addons Plugin <= 3.1.5 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2024-22136

4.3MEDIUM

What is CVE-2024-22136?

A Cross-Site Request Forgery (CSRF) vulnerability exists in DroitThemes Droit Elementor Addons, specifically impacting the Widgets, Blocks, and Templates Library intended for the Elementor Builder. This vulnerability can potentially allow unauthorized actions to be performed on behalf of authenticated users without their consent, leading to significant security risks. The affected versions include all releases prior to 3.1.5, highlighting an urgent need for users to update to the latest version to mitigate possible exploits.

Affected Version(s)

Droit Elementor Addons – Widgets, Blocks, Templates Library For Elementor Builder <= 3.1.5

References

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Elliot (Patchstack Alliance)
.
The Cyber Security Vulnerability Database.