VULNERABILITY INTELLIGENCE

CVE-2024-3927

CVSS score5.3 MEDIUM
EPSS probability0.43%
CISA KEVNot currently listed
Published2024-05-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Form Submission Admin Email Bypass in all versions up to, and including, 5.6.3. This is due to the plugin not properly checking for all variations of an administrators emails. This makes it possible for unauthenticated attackers to bypass the restriction using a +value when submitting the contact form.

Weakness classification

  • CWE-424: Improper Protection of Alternate Path

Primary references