CVE-2024-24844: WordPress PowerPack Pro for Elementor plugin <= 2.10.6 - Unauthenticated Plugin Settings Reset vulnerability
Missing Authorization vulnerability in IdeaBox Creations PowerPack Pro for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PowerPack Pro for Elementor: from n/a through 2.10.6.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24844?
CVE-2024-24844 is classified as a serious vulnerability due to the risk of unauthorized access resulting from missing authorization controls.
How do I fix CVE-2024-24844?
To resolve CVE-2024-24844, update PowerPack Pro for Elementor to the latest version beyond 2.10.6 to ensure proper access controls.
Which versions of PowerPack Pro for Elementor are affected by CVE-2024-24844?
CVE-2024-24844 affects PowerPack Pro for Elementor versions from n/a through 2.10.6.
What type of vulnerability is CVE-2024-24844?
CVE-2024-24844 is a Missing Authorization vulnerability that allows attackers to exploit incorrectly configured access control security levels.
Who is the vendor associated with CVE-2024-24844?
The vendor associated with CVE-2024-24844 is IdeaBox Creations, which develops PowerPack Pro for Elementor.