High · 7.5 CVE-2024-43140 EUVD-2024-40067GHSA-xf46-hjp6-hxpp

WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.4 - Local File Inclusion vulnerability

Published Aug 13, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: G5Theme Product: Ultimate Bootstrap Elements for Elementor

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in G5Theme Ultimate Bootstrap Elements for Elementor allows PHP Local File Inclusion.This issue affects Ultimate Bootstrap Elements for Elementor: from n/a through 1.4.4.

Affected products

Vendor	Product	Affected	Fixed
G5Theme	Ultimate Bootstrap Elements for Elementor	≤ 1.4.4	—

References

https://patchstack.com/database/vulnerability/ultimate-bootstrap-elements-for-elementor/wordpress-ultimate-bootstrap-elements-for-elementor-plugin-1-4-4-local-file-inclusion-vulnerability?_s_id=cve vdb-entry