Vulnerability · Published Jun 6, 2024 · Assigned by Wordfence
CVE-2024-5153Startklar Elementor Addons <= 1.7.15 - Unauthenticated Path Traversal to Arbitrary Directory Deletion
Critical 9.1
In plain English
A critical-severity path traversal in Startklar Elementor Addons from wshberlin. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
The Startklar Elementor Addons plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.7.15 via the 'dropzone_hash' parameter. This makes it possible for unauthenticated attackers to copy the contents of arbitrary files on the server, which can contain sensitive information, and to delete arbitrary directories, including the root WordPress directory.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| wshberlin | Startklar Elementor Addons | 0 – through 1.7.15 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H