The vulnerability CVE-2024-53739 in the Cryptocurrency Widgets For Elementor plugin arises from improper validation of filenames used in PHP include or require statements. This allows remote attackers to perform Remote File Inclusion (RFI), enabling execution of arbitrary code on the server. The issue affects all versions up to 1.6.4. The CVSS v3.1 score is 8.1, indicating high severity with network attack vector, high complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No patch or official fix details are currently available from the vendor or advisory sources.

Successful exploitation of this vulnerability can lead to remote code execution on the affected server, compromising confidentiality, integrity, and availability of the system running the vulnerable plugin. This could allow attackers to execute arbitrary code, potentially leading to full system compromise. No known exploits have been reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the affected plugin version to mitigate risk. Monitor vendor channels for updates and apply patches promptly once available.