CVE-2024-24843: WordPress PowerPack Pro for Elementor Plugin < 2.10.8 is vulnerable to Cros

WordPress PowerPack Pro for Elementor Plugin < 2.10.8 is vulnerable to Cross Site Request Forgery (CSRF)

Status

Published

2024-02-21

Updated

2026-04-28

Assigning organization

Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in PowerPack Addons for Elementor PowerPack Pro for Elementor.This issue affects PowerPack Pro for Elementor: from n/a before 2.10.8.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PowerPack Addons for Elementor PowerPack Pro for Elementor

Default version status: unaffected

n/a to < 2.10.8affected

References

https://patchstack.com/database/vulnerability/powerpack-elements/wordpress-powerpack-pro-for-elementor-plugin-2-10-8-csrf-leading-to-plugin-settings-change-xss-vulnerability?_s_id=cve ↗