PHP Remote File Inclusion vulnerability in Pricing table addon for Elementor

CVE-2024-52499

Summary

The Kardi Pricing Table Addon for Elementor contains a vulnerability that grants malicious actors the ability to exploit PHP Local File Inclusion due to improper control in the handling of filename parameters. This flaw can result in unauthorized access to sensitive files on the server, potentially leading to further compromises of the application. Affected versions range from n/a through 1.0.0. It is essential for users to update to secure versions and implement security measures to mitigate the risk associated with this vulnerability.

References