Lucene search
PRIOn knowledge basePRION:CVE-2020-13125HistoryMay 17, 2020 - 1:15 a.m.
Design/Logic Flaw
2020-05-1701:15:00
PRIOn knowledge base
www.prio-n.com
An issue was discovered in the “Ultimate Addons for Elementor” plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13126. Unauthenticated attackers can create users with the Subscriber role even if registration is disabled.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ultimate_addons_for_elementor | lt | 1.24.2 |
Related
prion
prion
Remote code execution
2020-05-17 01:15:00
cvelist
cvelist
CVE-2020-13125
2020-05-17 00:39:00
CVE-2020-13126
2020-05-17 00:38:37
cve
cve
CVE-2020-13125
2020-05-17 01:15:11
CVE-2020-13126
2020-05-17 01:15:11
nvd
nvd
CVE-2020-13126
2020-05-17 01:15:11
CVE-2020-13125
2020-05-17 01:15:11
wpvulndb
wpvulndb
Ultimate Addons for Elementor < 1.24.2 - Registration Bypass
2020-05-07 00:00:00
Elementor Pro < 2.9.4 - Authenticated Arbitrary File Upload
2020-05-07 00:00:00
patchstack
patchstack
wpexploit
wpexploit
Elementor Pro < 2.9.4 - Authenticated Arbitrary File Upload
2020-05-07 00:00:00