Privilege Escalation Vulnerability in PowerPack Pro for Elementor

CVE-2024-3668

What is CVE-2024-3668?

The PowerPack Pro for Elementor plugin for WordPress contains a security vulnerability that allows privilege escalation through improper access control mechanisms. Specifically, low privileged users can exploit this weakness to set a default role when creating registration forms. As a result, authenticated attackers with contributor-level access, or higher, can create forms that assign themselves administrative roles upon registration, effectively compromising the site's security and integrity. This flaw is present in all versions of the plugin up to and including version 2.10.17.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References