CVE-2020-13126

creationtimestamp| type| source ---|---|--- 2026-06-19 12:53:12+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/db341ae1-4456-46c9-aec9-8225eb0b6685...

EUVD-2020-5401

Malware in sbrugna...

Design/Logic Flaw

An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13126. Unauthenticated attackers can create users with the Subscriber role even if registration is disabled...

CVE-2020-13125

An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13126. Unauthenticated attackers can create users with the Subscriber role even if registration is disabled...

CVE-2020-13126

The Elementor Pro plugin for WordPress (versions prior to 2.9.4 ) is vulnerable to an arbitrary file upload vulnerability. This flaw allows an authenticated attacker with the Subscriber role to upload arbitrary executable files, potentially leading to remote code execution . This vulnerability wa...

VulnCheck KEV: CVE-2020-13125

An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13126. Unauthenticated attackers can create users with the Subscriber role even if registration is disabled...