CVE-2024-50453

Relative Path Traversal (CWE-23)

Published: Oct 28, 2024 / Updated: 22d ago

010
CVSS 7.5EPSS 0.04%High
CVE info copied to clipboard

Relative Path Traversal vulnerability in Webangon The Pack Elementor addons allows PHP Local File Inclusion.This issue affects The Pack Elementor addons: from n/a through 2.0.9.

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Timeline

CVE Assignment

NVD published the first details for CVE-2024-50453

Oct 28, 2024 at 8:15 PM
CVSS

A CVSS base score of 7.5 has been assigned.

Oct 28, 2024 at 8:15 PM / nvd
First Article

Feedly found the first article mentioning CVE-2024-50453. See article

Oct 28, 2024 at 8:15 PM / National Vulnerability Database
CVSS Estimate

Feedly estimated the CVSS score as HIGH

Oct 28, 2024 at 8:15 PM
CVSS Estimate

Feedly estimated the CVSS score as MEDIUM

Oct 28, 2024 at 9:27 PM
EPSS

EPSS Score was set to: 0.04% (Percentile: 9.9%)

Oct 29, 2024 at 9:43 AM
Static CVE Timeline Graph

Affected Systems

Php/cvs
+null more

Attack Patterns

CAPEC-139: Relative Path Traversal
+null more

News

Wordfence Intelligence Weekly WordPress Vulnerability Report (October 21, 2024 to October 27, 2024)
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week: WordPress Plugins with Reported Vulnerabilities Last Week
CVE-2024-50453 - Exploits & Severity - Feedly
A CVSS base score of 7.5 has been assigned. Oct 28, 2024 at 1:15 PM / nvd. First Article. Feedly found the first article mentioning CVE-2024-50453.
CVE Alert: CVE-2024-50453 - https://www.redpacketsecurity.com/cve_alert_cve-2024-50453/ #OSINT #ThreatIntel #CyberSecurity #cve_2024_50453
CVE Alert: CVE-2024-50453 - redpacketsecurity.com/cve_al… #OSINT #ThreatIntel #CyberSecurity #cve_2024_50453
CVE Alert: CVE-2024-50453 - https://www. redpacketsecurity.com/cve_aler t_cve-2024-50453/ # OSINT # ThreatIntel # CyberSecurity # cve_2024_50453
CVE-2024-50453 | Webangon The Pack Elementor Addons Plugin up to 2.0.9 on WordPress path traversal
A vulnerability was found in Webangon The Pack Elementor Addons Plugin up to 2.0.9 on WordPress. It has been classified as problematic . Affected is an unknown function. The manipulation leads to relative path traversal. This vulnerability is traded as CVE-2024-50453 . It is possible to launch the attack remotely. There is no exploit available.
See 6 more articles and social media posts

CVSS V3.1

Attack Vector:Network
Attack Complexity:High
Privileges Required:Low
User Interaction:None
Scope:Unchanged
Confidentiality:High
Integrity:High
Availability Impact:High

Categories

Be the first to know about critical vulnerabilities

Collect, analyze, and share vulnerability reports faster using AI