CVE-2024-33635: WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Unauthenticated Arbitrary Post/Page Deletion vulnerability
Published Apr 29, 2024
·Updated
Missing Authorization vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17.
Affected Software
1 affected component
Piotnet Piotnet Addons For Elementor Pro<=7.1.17
Event History
Apr 29, 2024
CVE Published
via MITRE·08:23 AM
Data Sourced
via MITRE·08:23 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-33635?
CVE-2024-33635 has a high severity level due to its potential for unauthorized access and significant impact.
2
How do I fix CVE-2024-33635?
To fix CVE-2024-33635, update Piotnet Addons For Elementor Pro to version 7.1.18 or later.
3
What versions of Piotnet Addons For Elementor Pro are affected by CVE-2024-33635?
CVE-2024-33635 affects all versions from n/a up to and including 7.1.17.
4
What type of vulnerability is CVE-2024-33635?
CVE-2024-33635 is classified as a Missing Authorization vulnerability.
5
Can CVE-2024-33635 lead to data loss?
Yes, CVE-2024-33635 can allow unauthorized users to delete posts or pages, potentially leading to data loss.