CVE-2024-4345 is a critical file upload vulnerability in the Startklar Elementor Addons WordPress plugin caused by inadequate validation of uploaded file types in the 'process' function of the 'startklarDropZoneUploadProcess' class. This flaw allows unauthenticated attackers to upload arbitrary files, potentially enabling remote code execution on the affected web server. The vulnerability affects all versions up to and including 1.7.13. The CVSS 3.1 base score is 9.8, reflecting the high impact and ease of exploitation. No patch or official fix has been disclosed by the vendor as of the publication date.

Successful exploitation allows unauthenticated attackers to upload arbitrary files to the server hosting the vulnerable plugin, which can lead to remote code execution. This compromises the confidentiality, integrity, and availability of the affected system. Given the critical CVSS score of 9.8, the impact is severe and could result in full system compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, it is recommended to disable or remove the Startklar Elementor Addons plugin if possible, or restrict file upload functionality to trusted users only. Monitor for updates from the vendor and apply patches promptly once available.