6.5
Medium
CVE-2024-5382 The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is…
Description
The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ma-template' REST API route in all versions up to, and including, 2.0.6.1. This makes it possible for unauthenticated attackers to create or modify existing Master Addons templates or make settings modifications related to these templates.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor 2.0 | earliest → 2.0.6.1 | No fix stated |
| free_widgets_for_elementor_plugin 2.0 | earliest → 2.0.6.1 | No fix stated |
| Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits 2.0 | earliest → 2.0.6.1 | No fix stated |
References
- www.wordfence.com www.wordfence.com
- plugins.trac.wordpress.org plugins.trac.wordpress.org
Timeline
- Published
- Last modified
Other CVEs of Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor
The 7 CVEs of Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor →
CVE-2024-6282
The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is…
5.4
Medium
CVE-2024-5542
The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is…
7.2
High
CVE-2024-3134
The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is…
6.4
Medium
CVE-2024-4580
The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is…
6.4
Medium