CVE-2024-37455

HIGH 8.8CVE-2024-37455 · Published 09/07/2024 · updated 17/06/2026

In short

CVE-2024-37455 is a HIGH (CVSS 8.8) vulnerability affecting ultimate addons for elementor (brainstormforce).
Chance of exploitation in the next 30 days (EPSS): 0.48%, higher than 41.6% of all vulnerabilities.
Fix: update to 1.36.32 or later.

Package	Affected versions	Patched versions
ultimate addons for elementor brainstormforce	`< 1.36.32`	`1.36.32`

Description

Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Elementor allows Privilege Escalation.This issue affects Ultimate Addons for Elementor: from n/a through 1.36.31.

References

patchstack.com/database/vulnerability/ultimate-elementor/wordpress-ultimate-addons-for-elementor-plugin-1-36-31-privilege-escalation-vulnerability · Third Party Advisory

More vulnerabilities in ultimate addons for elementor

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free