CVE-2024-1567

🗓️ 02 May 2024 16:52:15Reported by WordfenceType

cve🔗 web.nvd.nist.gov👁 120 Views🌐 WEB

Royal Elementor Addons and Templates plugin has unvalidated file uploads vulnerabilit

Reporter	Title	Published	Views	Family All 14
CNNVD	WordPress plugin Royal Elementor Addons and Templates has security vulnerabilities	2 May 202400:00	–	cnnvd
Cvelist	CVE-2024-1567 Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload	2 May 202416:52	–	cvelist
EUVD	EUVD-2024-17311	3 Oct 202520:07	–	euvd
NVD	CVE-2024-1567	2 May 202417:15	–	nvd
osv_cve	CVE-2024-1567	2 May 202417:15	–	osv_cve
Packet Storm	📄 WordPress Royal Elementor Addons 1.3.78 Unauthenticated Shell Upload	21 Jul 202600:00	–	packetstorm
Patchstack	WordPress Royal Elementor Addons Plugin <= 1.3.94 is vulnerable to Arbitrary File Upload	22 Apr 202400:00	–	patchstack
Patchstack	WordPress Royal Elementor Addons and Templates plugin <= 1.3.94 - Unauthenticated Limited File Upload vulnerability	22 Apr 202402:05	–	patchstack
Positive Technologies	PT-2024-18138 · WordPress · The Royal Elementor Addons/Templates	2 May 202400:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2024-1567: Unrestricted Upload of File with Dangerous Type	2 May 202400:00	–	rapid7

NVD

Vulners

Vulnrichment

Node

royal-elementor-addons royal_elementor_addonsRange<1.3.95wordpress

[
  {
    "vendor": "wproyal",
    "product": "Royal Addons for Elementor – Addons and Templates Kit for Elementor",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.3.94",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/royal-elementor-addons/tags/1.3.89/classes/modules/forms/wpr-file-upload.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/7a04705d-cd17-4b4b-b04d-de55d6479dab
plugins	www.plugins.trac.wordpress.org/browser/royal-elementor-addons/tags/1.3.90/classes/modules/forms/wpr-file-upload.php
plugins	www.plugins.trac.wordpress.org/changeset/3056612/royal-elementor-addons/tags/1.3.95/classes/modules/forms/wpr-file-upload.php

Parameter	Position	Path	Description	CWE
action	request body	wp-admin/admin-ajax.php	Unauthenticated file upload via wpr_addons_upload_file leading to remote code execution (PHP shell uploaded to wp-content/uploads/wpr-addons/forms/).	CWE-434
uploaded_file	request body	wp-admin/admin-ajax.php	Unauthenticated file upload via wpr_addons_upload_file leading to remote code execution (PHP shell uploaded to wp-content/uploads/wpr-addons/forms/).	CWE-434
triggering_event	request body	wp-admin/admin-ajax.php	Unauthenticated file upload via wpr_addons_upload_file leading to remote code execution (PHP shell uploaded to wp-content/uploads/wpr-addons/forms/).	CWE-434
allowed_file_types	request body	wp-admin/admin-ajax.php	Unauthenticated file upload via wpr_addons_upload_file leading to remote code execution (PHP shell uploaded to wp-content/uploads/wpr-addons/forms/).	CWE-434
wpr_addons_nonce	request body	wp-admin/admin-ajax.php	Unauthenticated file upload via wpr_addons_upload_file leading to remote code execution (PHP shell uploaded to wp-content/uploads/wpr-addons/forms/).	CWE-434
c	query param	wp-content/uploads/wpr-addons/forms/shell.php	Uploaded PHP shell executed by supplying a command via the 'c' GET parameter to achieve RCE.	CWE-434

17 Jun 2026 07:04Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.18.2 - 9.8

EPSS0.01137

SSVC

CWE-434