CVE-2024-33568

MEDIUM 6.5CVE-2024-33568 · Published 04/06/2024 · updated 17/06/2026

In short

CVE-2024-33568 is a MEDIUM (CVSS 6.5) vulnerability affecting element pack (bdthemes).
Chance of exploitation in the next 30 days (EPSS): 0.52%, higher than 44.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
element pack bdthemes	`≤ 7.7.4`	No fix yet

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Deserialization of Untrusted Data vulnerability in BdThemes Element Pack Pro allows Path Traversal, Object Injection.This issue affects Element Pack Pro: from n/a before 7.19.3.

References

patchstack.com/database/vulnerability/bdthemes-element-pack/wordpress-element-pack-pro-plugin-7-7-4-arbitrary-file-read-and-phar-deserialization-vulnerability · Third Party Advisory

More vulnerabilities in element pack

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

element pack

bdthemes

≤ 7.7.4

No fix yet

More vulnerabilities in element pack

See all →