CVE-2024-24843

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Feb 21, 2024
Updated: Feb 22, 2024
CWE ID 352

Summary

CVE-2024-24843 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the PowerPack Addons for Elementor PowerPack Pro plugin for Elementor. This issue allows an attacker to trick users into making unintended actions on a website controlled by the attacker, by forging malicious requests on behalf of the user. PowerPack Pro for Elementor versions prior to 2.10.8 are susceptible to this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share