Path Traversal Vulnerability Affects Better Elementor Addons

CVE-2024-33541

6.5MEDIUM

Key Information

Vendor: Betteraddons
Status: Better Elementor Addons
Vendor: CVE Published:; 4 June 2024

Summary

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in BetterAddons Better Elementor Addons allows PHP Local File Inclusion.This issue affects Better Elementor Addons: from n/a through 1.4.1.

Affected Version(s)

Better Elementor Addons <= 1.4.1

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Jun 4, 2024
Vulnerability Reserved.
Apr 24, 2024

Collectors

NVD DatabaseMitre Database

Credit

Ray Wilson (Patchstack Alliance)