Missing Authorization in Unlimited Elements for Elementor by Unlimited Elements
CVE-2024-35674

8.8HIGH

Key Information:

Vendor

Unlimited-elements

Status
Unlimited Elements For Elementor \(free Widgets\, Addons\, Templates\)
Vendor
CVE Published:
5 June 2024

What is CVE-2024-35674?

A vulnerability has been identified in Unlimited Elements For Elementor, specifically a Missing Authorization issue that can potentially allow unauthorized access to sensitive functionalities. This vulnerability affects versions from n/a through 1.5.109 of the plugin. Proper access control mechanisms are crucial for safeguarding user data and ensuring that only authorized users can execute specific actions within the application. Without these mechanisms in place, attackers could exploit this weakness to gain unintended access to critical features, emphasizing the importance of timely software updates and security practices.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://patchstack.com/database/vulnerability/unlimited-e...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.