Unrated severityNVD Advisory· Published May 17, 2024· Updated Apr 28, 2026
WordPress Elementor plugin <= 3.19.0 - Arbitrary File Deletion and Phar Deserialization vulnerability
CVE-2024-24934
Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Elementor Elementor Website Builder allows Manipulating Web Input to File System Calls.This issue affects Elementor Website Builder: from n/a through 3.19.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=3.19.0+ 1 more
- (no CPE)range: <=3.19.0
- (no CPE)range: n/a
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.