CVE-2022-4103 Royal Elementor Addons < 1.3.56 - Subscriber+ Arbitrary Post Creation

2023-01-0922:13:38

WPScan

www.cve.org

cve-2022-4103; wordpress plugin; authorisation bypass; csrf vulnerability; arbitrary post creation; template manipulation; subscriber privilege escalation

AI Score

4.9

Confidence

High

EPSS

0.001

Percentile

21.8%

JSON

The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorisation and CSRF checks when creating a template, and does not ensure that the post created is a template. This could allow any authenticated users, such as subscriber to create a post (as well as any post type) with an arbitrary title

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Royal Elementor Addons (Elementor Templates, Post Grid, Mega Menu & Header Footer Builder, WooCommerce Builder, Product Grid, Slider, Parallax Image & other Free Elementor Widgets)",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "1.3.56"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]

References

wpscan.com/vulnerability/5e1244f7-39b5-4f37-8fef-e3f35fc388f1