The vulnerability of the Royal Elementor Addons and Templates plugin of the WordPress content management system allows a hacker to execute arbitrary code by loading a specially created file.

🗓️ 21 Oct 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 6 Views

In WordPress, the Royal Elementor Addons and Templates plugin has a vulnerability that allows arbitrary code execution by downloading a crafted code file.

Reporter	Title	Published	Views	Family All 36
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Royal-Elementor-Addons Royal_Elementor_Addons	14 Jul 202518:09	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Royal-Elementor-Addons Royal_Elementor_Addons	27 Dec 202513:27	–	githubexploit
GithubExploit	Mephisto	21 May 202605:06	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Royal-Elementor-Addons Royal_Elementor_Addons	5 Nov 202318:02	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Royal-Elementor-Addons Royal_Elementor_Addons	2 Nov 202303:15	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Royal-Elementor-Addons Royal_Elementor_Addons	3 Nov 202300:58	–	githubexploit
GithubExploit	Exploit for CVE-2023-4666	14 Oct 202314:04	–	githubexploit
0day.today	WordPress Royal Elementor 1.3.78 Shell Upload Vulnerability	16 Oct 202300:00	–	zdt
0day.today	WordPress Royal Elementor Addons Remote Code Execution Exploit	28 Nov 202300:00	–	zdt
ATTACKERKB	CVE-2023-5360	31 Oct 202300:00	–	attackerkb

Vulners

Node

wordpress royal_elementor_addons_and_templatesRange≤1.3.78

Source	Link
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2023101736
securityonline	www.securityonline.info/cve-2023-5360-wordpress-plugin-zero-day-affects-200k-sites/
github	www.github.com/IRB0T/CVE-Scan/tree/main/CVE-2023-5360-Scan
wpscan	www.wpscan.com/blog/unauthenticated-file-upload-vulnerability-addressed-in-royal-elementor-addons-and-templates-1-3-79/
wpscan	www.wpscan.com/vulnerability/281518ff-7816-4007-b712-63aed7828b34
web	www.web.nvd.nist.gov/view/vuln/detail

27 May 2026 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 39.8

CVSS 210

EPSS0.81695

WordPress plugin Royal Elementor Addons Templates vulnerability crafted code file server side scripting