CVE-2023-5360 Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

2023-10-3113:54:42

WPScan

www.cve.org

wordpress

plugin

vulnerability

file upload

rce

unauthenticated users

cve-2023-5360

9.8 High

AI Score

Confidence

High

0.911 High

EPSS

Percentile

98.9%

JSON

The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Royal Elementor Addons and Templates",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "1.3.79"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]