CVE-2024-35674

WordPress Unlimited Elements For Elementor plugin <= 1.5.109 - Broken Access Control vulnerability

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.109.

We have discovered 9,115 live websites that are affected by CVE-2024-35674.

Test my site



Affected Software

Product  Unlimited Elements For Elementor
Category Wordpress Plugins
Vulnerable Domains9,115 live websites (34.11% of Unlimited Elements For Elementor install base)
Vulnerable Versions
  • from 0 through 1.5.109
Vulnerable Versions Count134 versions ( 82.21% of all versions)


Common Weakness Enumeration

CWE-862 Missing Authorization



Details

  • Published - Jun 5, 2024
  • Updated - Aug 2, 2024

Credits

  • Khalid (Patchstack Alliance) (finder)

CVE-2024-35674 usage by Country

United States3,456 websites


Germany1,032 websites
Cyprus511 websites
France433 websites
Russia289 websites
GB282 websites
Brazil209 websites
Italy173 websites
Poland168 websites
Spain153 websites

CVE-2024-35674 usage by TLD

.com4,171 websites
.de359 websites
.org342 websites
.com.br331 websites
.ru252 websites
.it178 websites
.co.uk170 websites
.net166 websites
.com.au146 websites
.fr139 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2024-35674

Top websites that are affected by CVE-2024-35674. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
***.cz Czech Republic*,***
*********.me United States*,***
******.com United States**,***
**************.de Germany**,***
***********.com United States**,***
****.org Switzerland**,***
********.com United States**,***
***********.net United States**,***
************.com United States***,***
******.com United States***,***
See full domain list

FAQ

CVE-2024-35674 is Missing Authorization in Unlimited Elements For Elementor
A total of 9,115 websites have been identified as vulnerable to CVE-2024-35674, discovered through global website indexing conducted by WebTechSurvey.
Unlimited Elements For Elementor is susceptible to CVE-2024-35674 vulnerability.
Unlimited Elements For Elementor versions before, and including, 1.5.109 are vulnerable to CVE-2024-35674.