CVE-2020-13126

creationtimestamp| type| source ---|---|--- 2026-06-19 12:53:12+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/db341ae1-4456-46c9-aec9-8225eb0b6685...

EUVD-2020-5401

Malware in sbrugna...

Design/Logic Flaw

An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13126. Unauthenticated attackers can create users with the Subscriber role even if registration is disabled...

CVE-2020-13125

An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13126. Unauthenticated attackers can create users with the Subscriber role even if registration is disabled...

CVE-2020-13126

The CVE-2020-13126 entry concerns Elementor Pro for WordPress (before 2.9.4). Affected component: Elementor Pro plugin; root cause: authenticated user with Subscriber role can upload arbitrary executable files, enabling remote code execution. Note: the free Elementor plugin is unaffected. Exploit...

VulnCheck KEV: CVE-2020-13125

An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13126. Unauthenticated attackers can create users with the Subscriber role even if registration is disabled...