← Back

Startklar Elmentor Addons

startklar_elmentor_addons

Vendor: Web Shop Host • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-5153
1Web Shop Host
1Startklar Elmentor Addons
Jun 17, 2026
Jun 6, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The Startklar Elementor Addons plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.7.15 via the 'dropzone_hash' parameter. This makes it possible for unauthenticated attacker...Show more
The Startklar Elementor Addons plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.7.15 via the 'dropzone_hash' parameter. This makes it possible for unauthenticated attackers to copy the contents of arbitrary files on the server, which can contain sensitive information, and to delete arbitrary directories, including the root WordPress directory.Show less