High · 8.5 CVE-2024-37462 EUVD-2024-36682GHSA-66x4-xvv2-2j4j

WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.2 - Local File Inclusion vulnerability

Published Jul 9, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: G5Theme Product: Ultimate Bootstrap Elements for Elementor

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in G5Theme Ultimate Bootstrap Elements for Elementor allows Path Traversal.This issue affects Ultimate Bootstrap Elements for Elementor: from n/a through 1.4.2.

Affected products

Vendor	Product	Affected	Fixed
G5Theme	Ultimate Bootstrap Elements for Elementor	≤ 1.4.2	—

References

https://patchstack.com/database/vulnerability/ultimate-bootstrap-elements-for-elementor/wordpress-ultimate-bootstrap-elements-for-elementor-plugin-1-4-2-local-file-inclusion-vulnerability?_s_id=cve vdb-entry