Elementor Plugin Vulnerable to PHP Object Injection

CVE-2024-3018

Summary

The Essential Addons for Elementor plugin, utilized in WordPress environments, is susceptible to a PHP Object Injection vulnerability that affects all versions up to and including 5.9.13. The issue arises from the insecure deserialization of untrusted input within the 'error_resetpassword' attribute in the 'Login | Register Form' widget, which is disabled by default. Authenticated attackers with author-level access can exploit this vulnerability to inject a malicious PHP object. If a vulnerable chain of PHP Object Pop (POP) is present due to additional plugins or themes, potential consequences include the ability to delete arbitrary system files, leak sensitive information, or execute unauthorized code, further compromising the target system's security.

References