CVE-2024-53739

Name of the Vulnerable Software and Affected Versions Cool Plugins Cryptocurrency Widgets For Elementor versions 1.6.4 and earlier

Description The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This could potentially lead to remote code execution.

Recommendations For versions 1.6.4 and earlier, update the plugin to a patched version as soon as possible to mitigate the risk of exploitation. As a temporary workaround, consider restricting access to vulnerable PHP files or functions until a patch is available.