CVE-2024-6434: falha de baixa gravidade em leap13 Premium Addons for Elementor – Powerful…
Premium Addons for Elementor <= 4.10.35 - Regular Expressions Denial of Service
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.1epss 0.6%
The Premium Addons for Elementor plugin for WordPress is vulnerable to Regular Expression Denial of Service (ReDoS) in all versions up to, and including, 4.10.35. This is due to processing user-supplied input as a regular expression. This makes it possible for authenticated attackers, with Author-level access and above, to create and query a malicious post title, resulting in slowing server resources.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
CVEs relacionadas — leap13 Premium Addons for Elementor – Powerful…
No mesmo produto, das mais perigosas para as menos.
CVE-2025-14155MEDIUMPremium Addons for Elementor <= 4.11.53 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'get_template_content'EPSS 0.8%CVE-2024-0376MEDIUMPremium Addons for Elementor <= 4.10.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link WidgetEPSS 0.7%CVE-2024-0326MEDIUMPremium Addons for Elementor <= 4.10.17 - Authenticated(Contributor+) Stored Cross-Site Scripting via Link WrapperEPSS 0.6%CVE-2024-4203MEDIUMPremium Addons for Elementor <= 4.10.30 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.5%CVE-2024-2665MEDIUMPremium Addons for Elementor <= 4.10.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via ButtonEPSS 0.5%CVE-2024-2664MEDIUMPremium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.5%