CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Webangon The Pack Elementor addons allows PHP Local File Inclusion, Path Traversal.This issue affects The Pack Elementor addons: from n/a through 2.0.8.6.
Explanation of Vulnerability in Simple Terms
The Pack Elementor addons through version 2.0.8.6 contains a path traversal vulnerability that allows authenticated users to read files outside the intended directory. An attacker with low-level site access can craft requests to access sensitive files on the server. This affects confidentiality but not integrity or availability.
What an attacker can do
Read files outside the intended directory on the server.
Potential impact on your site
Sensitive files (config, database backups, private keys) may be exposed to low-privilege users.
Conditions required to exploit
Attacker must have a low-privilege account on the site (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
