CVE-2024-37479: WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.8.1 - Contributor+ Local File Inclusion vulnerability
Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress Bar" widget in New Post, specifically in the "progresstype" attribute.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.8.1.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-37479?
CVE-2024-37479 has been classified as a high-severity local file inclusion vulnerability.
How do I fix CVE-2024-37479?
To fix CVE-2024-37479, update the LA-Studio Element Kit for Elementor to version 1.3.8.2 or later.
What versions are affected by CVE-2024-37479?
CVE-2024-37479 affects LA-Studio Element Kit for Elementor from an unknown version up to and including 1.3.8.1.
What does CVE-2024-37479 affect specifically?
CVE-2024-37479 affects the 'LaStudioKit Progress Bar' widget in the LA-Studio Element Kit for Elementor.
Can CVE-2024-37479 be exploited remotely?
Yes, CVE-2024-37479 can be exploited remotely through the vulnerable 'progress_type' attribute.