Skip to content
OpenAdvisories

Vendor

wshberlin

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2024-5153 Public exploit

    Startklar Elementor Addons <= 1.7.15 - Unauthenticated Path Traversal to Arbitrary Directory Deletion

    The Startklar Elementor Addons plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.7.15 via the 'dropzone_hash' parameter. This makes it possible for unauthenticated attackers to copy the contents of arbitrary fil…