CVE-2024-3499: ElementsKit Elementor addons <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Onepage Scroll Module
The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.0 via the generatenavigationmarkup function of the Onepage Scroll module. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3499?
CVE-2024-3499 has been classified as a high severity vulnerability due to its potential for Local File Inclusion.
How do I fix CVE-2024-3499?
To fix CVE-2024-3499, update the ElementsKit Elementor addons plugin to version 3.1.1 or higher.
What does CVE-2024-3499 allow attackers to do?
CVE-2024-3499 allows authenticated attackers with contributor-level access to perform Local File Inclusion.
Which versions of ElementsKit are affected by CVE-2024-3499?
CVE-2024-3499 affects all versions of the ElementsKit Elementor addons plugin up to and including 3.1.0.
Who can exploit the CVE-2024-3499 vulnerability?
Only authenticated users with contributor-level access and above can exploit the CVE-2024-3499 vulnerability.