CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in BetterAddons Better Elementor Addons allows PHP Local File Inclusion.This issue affects Better Elementor Addons: from n/a through 1.4.1.
Explanation of Vulnerability in Simple Terms
Better Elementor Addons versions up to 1.4.1 contain a path traversal vulnerability that allows authenticated users to read files from the server outside the intended directory. An attacker with low-level site access can enumerate and access sensitive files by manipulating file paths. No user interaction is required once authenticated.
What an attacker can do
Read arbitrary files from the server, including configuration files and other sensitive data.
Potential impact on your site
Sensitive files like database credentials or configuration data could be exposed to low-privilege users.
Conditions required to exploit
Attacker must have a low-privilege account on the site (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
