Lucene search
PRIOn knowledge basePRION:CVE-2022-0320HistoryFeb 01, 2022 - 1:15 p.m.
Design/Logic Flaw
2022-02-0113:15:00
PRIOn knowledge base
www.prio-n.com
5
The Essential Addons for Elementor WordPress plugin before 5.0.5 does not validate and sanitise some template data before it them in include statements, which could allow unauthenticated attackers to perform Local File Inclusion attack and read arbitrary files on the server, this could also lead to RCE via user uploaded files or other LFI to RCE techniques.
| CPE | Name | Operator | Version |
|---|---|---|---|
| essential_addons_for_elementor | lt | 5.0.5 |
Related
patchstack
patchstack
wpvulndb
wpvulndb
Essential Addons for Elementor < 5.0.5 - Unauthenticated LFI
2022-01-31 00:00:00
cve
cve
CVE-2022-0320
2022-02-01 13:15:09
openvas
openvas
WordPress Essential Addons for Elementor Plugin < 5.0.5 LFI Vulnerability
2022-02-08 00:00:00
nvd
nvd
CVE-2022-0320
2022-02-01 13:15:09
cvelist
cvelist
CVE-2022-0320 Essential Addons for Elementor < 5.0.5 - Unauthenticated LFI
2022-02-01 12:21:42
githubexploit
githubexploit
Exploit for Path Traversal in Wpdeveloper Essential Addons For Elementor
2023-12-17 08:38:49
wpexploit
wpexploit
Essential Addons for Elementor < 5.0.5 - Unauthenticated LFI
2022-01-31 00:00:00