CVE-2024-43140

Summary

CVE-2024-43140 is a newly disclosedPath Traversal vulnerability that impacts the G5Theme Ultimate Bootstrap Elements for Elementor plugin. The flaw, which enables PHP Local File Inclusion, occurs due to an improper limitation of a pathname. This issue allows attackers to potentially gain unauthorized access to restricted directories and access sensitive files on affected systems. The vulnerability affects versions of Ultimate Bootstrap Elements for Elementor ranging from not available to 1.4.4. Organizations using this plugin are advised to update to a patched version as soon as possible to mitigate the risk of exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.