{"title":"WordPress Essential Addons for Elementor plugin <= 5.9.13 - Authenticated (Author+) PHP Object Injection via error_resetpassword vulnerability","description":"Authenticated (Author+) PHP Object Injection via error_resetpassword vulnerability discovered by Ng\u00f4 Thi\u00ean An (ancorn_) in WordPress Plugin Essential Addons for Elementor (versions <= 5.9.13)","affected_in":"<= 5.9.13","fixed_in":"5.9.14","references":[{"slug":"patchstack","label":"PatchStack","refs":[{"value":"wordpress-essential-addons-for-elementor-plugin-5-9-13-authenticated-author-php-object-injection-via-error-resetpassword-vulnerability","label":"Details","link":"https:\/\/patchstack.com\/database\/vulnerability\/essential-addons-for-elementor-lite\/wordpress-essential-addons-for-elementor-plugin-5-9-13-authenticated-author-php-object-injection-via-error-resetpassword-vulnerability?_a_id=431"}]},{"slug":"cve","label":"CVE","refs":[{"value":"2024-3018","label":"2024-3018","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-3018"}]}],"type":{"label":"PHP Object Injection","slug":""},"id":"ps-17327","created_at":"2024-04-01T05:17:41+00:00","updated_at":"2024-04-01T05:17:41+00:00","published_at":"2024-04-01T05:17:08+00:00","score":8,"score_group":"","score_vector":"","is_exploited":false,"patched_in_ranges":[],"patch_priority":1}