8.5
Élevée
CVE-2024-33568 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Deserialization of Untrusted Data…
Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Deserialization of Untrusted Data vulnerability in BdThemes Element Pack Pro allows Path Traversal, Object Injection.This issue affects Element Pack Pro: from n/a before 7.19.3.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Element Pack Pro 7.19 | premières → < 7.19.3 | 7.19.3 |
Autres CVE de Element Pack Pro
Les 4 CVE de Element Pack Pro →
CVE-2026-40721
Contributor Local File Inclusion in Element Pack Pro <= 9.0.6 versions
7.5
Élevée
CVE-2025-46258
Missing Authorization vulnerability in BdThemes Element Pack Pro allows Exploiting Incorrectly Configured Access Control…
5.4
Moyenne
CVE-2025-46257
Cross-Site Request Forgery (CSRF) vulnerability in BdThemes Element Pack Pro allows Cross Site Request Forgery.This…
4.3
Moyenne