CVE-2022-1329

🗓️ 19 Apr 2022 00:00:00Reported by WordfenceType

cve🔗 web.nvd.nist.gov👁 272 Views🌐 WEB

Elementor WordPress plugin 3.6.0-3.6.2 allows unauthorized AJAX actions leading to remote code execution

Reporter	Title	Published	Views	Family All 26
GithubExploit	Exploit for Missing Authorization in Elementor Website_Builder	22 Sep 202509:14	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Elementor Website_Builder	11 Oct 202416:57	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Elementor Website_Builder	17 Apr 202205:44	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Elementor Website_Builder	15 Apr 202219:37	–	githubexploit
0day.today	WordPress Elementor 3.6.2 Remote Code Execution Vulnerability	14 Apr 202200:00	–	zdt
0day.today	WordPress Elementor 3.6.2 Shell Upload Exploit	5 Oct 202200:00	–	zdt
Circl	CVE-2022-1329	17 Apr 202206:23	–	circl
CNNVD	Elementor安全漏洞	13 Apr 202200:00	–	cnnvd
Cvelist	CVE-2022-1329 Elementor Website Builder 3.6.0 - 3.6.2 - Missing Authorization to Remote Code Execution	19 Apr 202200:00	–	cvelist
Metasploit	Wordpress Plugin Elementor Authenticated Upload Remote Code Execution	4 Oct 202219:49	–	metasploit

NVD

Vulners

Node

elementor website_builderRange3.6.0–3.6.2wordpress

[
  {
    "vendor": "elemntor",
    "product": "Elementor Website Builder ",
    "versions": [
      {
        "version": "3.6.0",
        "status": "affected"
      },
      {
        "version": "3.6.1",
        "status": "affected"
      },
      {
        "version": "3.6.2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/2708766/elementor/trunk/core/app/modules/onboarding/module.php
packetstormsecurity	www.packetstormsecurity.com/files/168615/WordPress-Elementor-3.6.2-Shell-Upload.html
pluginvulnerabilities	www.pluginvulnerabilities.com/2022/04/12/5-million-install-wordpress-plugin-elementor-contains-authenticated-remote-code-execution-rce-vulnerability/
wordfence	www.wordfence.com/blog/2022/04/elementor-critical-remote-code-execution-vulnerability/

Parameter	Position	Path	Description	CWE
action	request body	wp-admin/admin-ajax.php	Onboarding AJAX actions can be triggered via admin-ajax.php using action=elementor_upload_and_install_pro with a valid nonce to upload and execute a ZIP payload (Elementor Pro) leading to remote code execution on vulnerable Elementor versions.	CWE-434, CWE-862
_nonce	request body	wp-admin/admin-ajax.php	Onboarding AJAX actions can be triggered via admin-ajax.php using action=elementor_upload_and_install_pro with a valid nonce to upload and execute a ZIP payload (Elementor Pro) leading to remote code execution on vulnerable Elementor versions.	CWE-434, CWE-862
fileToUpload	request body	wp-admin/admin-ajax.php	Onboarding AJAX actions can be triggered via admin-ajax.php using action=elementor_upload_and_install_pro with a valid nonce to upload and execute a ZIP payload (Elementor Pro) leading to remote code execution on vulnerable Elementor versions.	CWE-434, CWE-862

17 Jun 2026 04:22Current

8.6High risk

Vulners AI Score8.6

CVSS 26.5

CVSS 3.18.8

EPSS0.92658

SSVC