Medium severity6.5NVD Advisory· Published Aug 12, 2024· Updated Apr 8, 2026
CVE-2024-4359
CVE-2024-4359
Description
The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to arbitrary file reads in all versions up to, and including, 5.7.2 via the SVG widget and a lack of sufficient file validation in the render_svg function. This makes it possible for authenticated attackers, with contributor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:bdthemes:element_pack:*:*:*:*:lite:wordpress:*:*+ 1 more
- cpe:2.3:a:bdthemes:element_pack:*:*:*:*:lite:wordpress:*:*range: <5.7.3
- (no CPE)range: <=5.7.2
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.