CVE-2024-37464: WordPress Beaver Builder Addons by WPZOOM plugin <= 1.3.5 - Local File Inclusion vulnerability
Published Jul 9, 2024
·Updated
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPZOOM Beaver Builder Addons by WPZOOM allows Path Traversal.This issue affects Beaver Builder Addons by WPZOOM: from n/a through 1.3.5.
Affected Software
1 affected component
WPZOOM Beaver Builder Addons Wordpress<1.3.6
Remediation
Information
Update to 1.3.6 or a higher version.
Event History
Jul 9, 2024
CVE Published
via MITRE·11:45 AM
Data Sourced
via MITRE·11:45 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-37464?
CVE-2024-37464 is categorized as a high severity vulnerability due to its potential for exploitation through path traversal.
2
How do I fix CVE-2024-37464?
To fix CVE-2024-37464, users should update the Beaver Builder Addons by WPZOOM to version 1.3.6 or later.
3
What software is affected by CVE-2024-37464?
CVE-2024-37464 affects the Beaver Builder Addons by WPZOOM versions up to 1.3.5.
4
What type of vulnerability is CVE-2024-37464?
CVE-2024-37464 is a path traversal vulnerability which allows attackers to access restricted directories.
5
What can happen if CVE-2024-37464 is exploited?
If exploited, CVE-2024-37464 could allow attackers to read sensitive files on the server.