Lucene search
PRIOn knowledge basePRION:CVE-2020-13126HistoryMay 17, 2020 - 1:15 a.m.
Remote code execution
2020-05-1701:15:00
PRIOn knowledge base
www.prio-n.com
1
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13125. An attacker with the Subscriber role can upload arbitrary executable files to achieve remote code execution. NOTE: the free Elementor plugin is unaffected.
| CPE | Name | Operator | Version |
|---|---|---|---|
| elementor_page_builder | lt | 2.9.4 |
Related
cvelist
cvelist
CVE-2020-13126
2020-05-17 00:38:37
CVE-2020-13125
2020-05-17 00:39:00
prion
prion
Design/Logic Flaw
2020-05-17 01:15:00
cve
cve
CVE-2020-13125
2020-05-17 01:15:11
CVE-2020-13126
2020-05-17 01:15:11
nvd
nvd
CVE-2020-13126
2020-05-17 01:15:11
CVE-2020-13125
2020-05-17 01:15:11
wpvulndb
wpvulndb
Ultimate Addons for Elementor < 1.24.2 - Registration Bypass
2020-05-07 00:00:00
Elementor Pro < 2.9.4 - Authenticated Arbitrary File Upload
2020-05-07 00:00:00
patchstack
patchstack
wpexploit
wpexploit
Elementor Pro < 2.9.4 - Authenticated Arbitrary File Upload
2020-05-07 00:00:00