This vulnerability (CVE-2024-43140) in G5Theme Ultimate Bootstrap Elements for Elementor is classified as CWE-22, indicating improper limitation of a pathname to a restricted directory, commonly known as a path traversal flaw. It enables PHP Local File Inclusion, which can lead to unauthorized access to files on the server. The affected versions include all releases up to 1.4.4. The CVSS v3.1 base score is 7.5, reflecting high impact on confidentiality, integrity, and availability. No patch or official remediation level has been published yet, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation could allow an attacker with low privileges to include local files via crafted pathnames, potentially leading to disclosure of sensitive information, code execution, or denial of service. The CVSS vector indicates network attack vector, high complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected plugin and monitor for suspicious activity related to file inclusion attempts. Avoid exposing the plugin to untrusted users or inputs that could exploit path traversal. Follow the vendor's updates closely for an official fix.