CVE-2025-24584: WordPress Ultimate Store Kit Elementor Addons plugin <= 2.3.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in bdthemes Ultimate Store Kit Elementor Addons ultimate-store-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Store Kit Elementor Addons: from n/a through <= 2.3.0.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-24584?
CVE-2025-24584 is classified as a critical vulnerability due to the potential for unauthorized access and data exploitation.
How do I fix CVE-2025-24584?
To fix CVE-2025-24584, update the BdThemes Ultimate Store Kit Elementor Addons to version 2.3.1 or later.
What is the impact of CVE-2025-24584?
The impact of CVE-2025-24584 includes the risk of unauthorized access to sensitive features and data due to incorrectly configured access controls.
Who is affected by CVE-2025-24584?
CVE-2025-24584 affects users of BdThemes Ultimate Store Kit Elementor Addons versions up to 2.3.0.
Is CVE-2025-24584 specific to certain versions?
Yes, CVE-2025-24584 specifically affects versions of BdThemes Ultimate Store Kit Elementor Addons from n/a through 2.3.0.