CVEvulnerability
CVE-2023-5360
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-10-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-434
Description
The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.
Affected configurations
• royal-elementor-addons royal elementor addons (< 1.3.79)
Related
Weakness · CWE (1)
- CWE-434 Unrestricted Upload of File with Dangerous Type weakness
References
- http://packetstormsecurity.com/files/175992/WordPress-Royal-Elementor-Addons-And-Templates-Remote-Shell-Upload.html packetstormsecurity.com
- https://wpscan.com/vulnerability/281518ff-7816-4007-b712-63aed7828b34 Exploit, Third Party Advisory
- http://packetstormsecurity.com/files/175992/WordPress-Royal-Elementor-Addons-And-Templates-Remote-Shell-Upload.html packetstormsecurity.com
- https://wpscan.com/vulnerability/281518ff-7816-4007-b712-63aed7828b34 Exploit, Third Party Advisory