CVE-2021-24358 Scanner

The Plus Addons for Elementor Page Builder WordPress plugin is a widely used plugin that enhances the functionality of the Elementor page builder. It adds a wide range of widgets and modules to Elementor, providing users with a seamless and efficient page building experience. With its user-friendly interface, The Plus Addons for Elementor Page Builder WordPress plugin has been widely embraced by web developers who want to create custom pages and websites with ease. 

However, recently, a vulnerability, CVE-2021-24358, was detected in this plugin. This vulnerability arises from the fact that the plugin does not validate the redirect parameter on a specifically crafted URL before redirecting the user to it, thus leading to an Open Redirect issue. The implication of this vulnerability is that an attacker can craft malicious links, which when clicked, redirect users to a phishing site or other malicious websites.

The exploitation of this vulnerability can lead to serious consequences. An attacker can use it to steal personal information, such as login credentials, sensitive data, and other personal information. In addition, they can use it to install malicious software or launch other types of cyber attacks, such as denial-of-service (DoS) attacks, which can cause significant damage to the website or the server hosting it.

In conclusion, the vulnerability detected in The Plus Addons for Elementor Page Builder WordPress plugin highlights the need for proactive security measures to protect digital assets. By using web vulnerability scanners and other security tools, web developers can easily and quickly detect and remediate vulnerabilities, protecting their websites and users from cyber threats. With the pro features of the s4e.io platform, users can access a wealth of information about vulnerabilities and threats, enhancing their overall digital security.

REFERENCES

• https://theplusaddons.com/changelog/
• https://wpscan.com/vulnerability/fd4352ad-dae0-4404-94d1-11083cb1f44d