CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP Local File Inclusion.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0.
Explanation of Vulnerability in Simple Terms
Consulting Elementor Widgets versions up to 1.3.0 contain a path traversal vulnerability that allows an attacker to read arbitrary files from the server. The vulnerability requires specific conditions to exploit but can expose sensitive configuration files, database credentials, and other protected data. No authentication is required to attempt the attack.
What an attacker can do
Read arbitrary files from the server, including configuration files and sensitive data.
Potential impact on your site
Attackers could access wp-config.php, database credentials, and other sensitive files stored on your server.
Conditions required to exploit
Network access to the site; specific attack conditions must be met (high complexity).
Key dates
External resources
Related vulnerabilities
