Lucene search
PRIOn knowledge basePRION:CVE-2023-3124HistoryJun 07, 2023 - 2:15 a.m.
Privilege escalation
2023-06-0702:15:00
PRIOn knowledge base
www.prio-n.com
5
wordpress
vulnerable
data modification
privilege escalation
The Elementor Pro plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the update_page_option function in versions up to, and including, 3.11.6. This makes it possible for authenticated attackers with subscriber-level capabilities to update arbitrary site options, which can lead to privilege escalation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| elementor_pro | lt | 3.11.7 |
Related
cve
cve
CVE-2023-3124
2023-06-07 02:15:15
openvas
openvas
WordPress Elementor Pro Plugin < 3.11.7 Privilege Escalation Vulnerability
2023-12-08 00:00:00
cvelist
cvelist
CVE-2023-3124
2023-06-07 01:51:20
wpvulndb
wpvulndb
Elementor Pro < 3.11.7 - Subscriber+ Arbitrary Options Update
2023-03-28 00:00:00
githubexploit
githubexploit
Exploit for CVE-2023-3124
2023-09-05 12:32:50
nvd
nvd
CVE-2023-3124
2023-06-07 02:15:15