CVE-2023-47504-POC

CVE-2023-47504 POC CVE-2023-47504 のエクスプロイト。 NIST によると、この脆弱性により、認証されていないユーザーが Elementor Website Builder プラグインの機能にアクセスできるはずです。 脆弱性の調査と、脆弱性を説明する Patchstack の URL...

CVE-2023-32243

CVE-2023-32243 Essential Addons for Elementor - 未授权账户接管。 PoC 现已发布。 此内容仅用于教育/研究目的！使用风险自负！...

CVE-2024-9935

CVE-2024-9935 - Complemento Generador de PDF para Elementor Page Builder = 1.7.5 - Descarga Arbitraria de Archivos sin Autenticación Resumen El complemento PDF Generator Addon para Elementor Page Builder de WordPress es vulnerable a un Path Traversal en todas las versiones hasta la 1.7.5 inclusiv...

WP-CVE-2023-5360

WP-CVE-2023-5360 Royal Elementor Addons and Templates = 1.3.78 – 未经身份验证的任意文件上传 Python 2.7 买杯咖啡 : 比特币 $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC 如何使用？ 安装 Python 2.7 在此下载 python file.py...

Elementor-Pro-Unauthenticated-Arbitrary-File-Upload-to-RCE

Exploit 作者：Abdualhadi Khalifa https://x.com/absholi7ly 版本：Elementor Pro = 4.2.1 测试于：WordPress + Elementor Pro 4.2.1 Windows / Laragon / Apache CVE：CVE-2026-32475 致谢：该漏洞由 Tin Pham TF1T 通过 Patchstack 漏洞赏金计划发现 类别：WebApps 描述： Elementor Pro...

CVE-2022-21661

CVE-2022-21661 用于 Elementor 自定义皮肤的 CVE-2022-21661 漏洞利用。...

CVE-2022-1329-WordPress-Elementor-3.6.0-3.6.1-3.6.2-Remote-Code-Execution-Exploit

WordPressプラグイン - Elementor 3.6.0 3.6.1 3.6.2 リモートコード実行 root@kitploit: Google Dork: なし Date: 2022年4月16日 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ 下にスクロールしてバージョンを選択 Version:...

Wordpress-cve-CVE-2022-21661

Wordpress 5.8.2 CVE-2022-21661 脆弱性環境 この環境は、CVE-2022-21661 をテストするために Elementor Custom Skin プラグインを使用してセットアップされています。 環境を起動するには console wp-lab$ ./start.sh 管理者パスワードを取得するには、実行中のコンテナからログを取得します。コンテナが起動するたびに新しいパスワードが生成されます。 console $wp-lab$ docker logs test user admin pwd: inpJbxn+mhWWNSgEAlsU2A== localip...

essential-addons-for-elementor-xss-poc

🔍 Essential Addons for Elementor XSS脆弱性検出ツール 🚨 重要情報 このツールはセキュリティ研究およびパッチ適用目的のみに使用してください。サイトに害を及ぼすために使用しないでください。脆弱なサイトを見つけた場合は、サイト所有者に責任を持って報告し、直ちに更新してもらうようにしてください。 ⚠️ 脆弱性の詳細 Essential Addons for Elementorにおける反射型XSS脆弱性が、バージョン6.0.15未満を使用している10万以上のウェブサイトに影響を与えます。これには CVE-2025-24752 が割り当てられています。 👉...

Elementor-3.18.0-Upload-Path-Traversal-RCE-CVE-2023-48777

此存储库没有 README。...

CVE-2022-29455

CVE-2022-29455 Wordpress 漏洞 - XSS（跨站脚本攻击） 漏洞位置 https://add your target here/wp-content/plugins/elementor/assets/js/frontend.min.js 受影响版本 示例 - https://www.youtube.com/watch?v=4qvOkSbhcE...

WordPress The Plus Addons for Elementor <4.1.12 - Cross-Site Scripting

WordPress The Plus Addons for Elementor plugin before 4.1.12 is susceptible to cross-site scripting. The plugin does not properly sanitize some of its fields in the heplusmorepost AJAX action, which is exploitable by both unauthenticated and authenticated users. An attacker can inject arbitrary...

WordPress Elementor Website Builder <3.1.4 - Cross-Site Scripting

WordPress Elementor Website Builder plugin before 3.1.4 contains a DOM cross-site scripting vulnerability. It does not sanitize or escape user input appended to the DOM via a malicious hash. id: CVE-2021-24891 info: name: WordPress Elementor Website Builder 3.1.4 - Cross-Site Scripting author:...

WordPress Royal Elementor Addons Plugin <= 1.3.78 - Arbitrary File Upload

Arbitrary File Upload vulnerability in WordPress Royal Elementor Addons Plugin. This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. This vulnerability has been fixed in version...

WordPress Elementor Website Builder <= 3.5.5 - DOM Cross-Site Scripting

WordPress Elementor Website Builder plugin 3.5.5 and prior contains a reflected cross-site scripting vulnerability via the document object model. id: CVE-2022-29455 info: name: WordPress Elementor Website Builder = 3.5.5 - DOM Cross-Site Scripting author: rotembar,daffainfo severity: medium...

WordPress Elementor Lite 5.7.1 - Arbitrary Password Reset

Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0 through 5.7.1. id: CVE-2023-32243 info: name: WordPress Elementor Lite 5.7.1 - Arbitrary Password Reset author:...

Unlimited Elements for Elementor <= 1.5.93 - Cross Site Scripting

Unlimited Elements For Elementor Free Widgets, Addons, Templates versions up to 1.5.93 contain a reflected cross-site scripting caused by improper neutralization of input during web page generation, letting attackers execute malicious scripts in the victim's browser, exploit requires attacker to...

Elementor Pro <=4.2.1 - Unauthenticated Arbitrary File Upload via Form Handler

Elementor Pro plugin for WordPress in versions =4.2.1 is vulnerable to unauthenticated arbitrary file upload in the Forms module File Upload field. The validation and processfield methods iterate over submitted file entries with different early-exit logic for UPLOADERRNOFILE entries. When an...

Premium Addons for Elementor - Unauthenticated Information Disclosure

Premium Addons for Elementor plugin for WordPress version 4.11.53 and below contains an unauthenticated information disclosure vulnerability.The vulnerability exists due to a missing authorization check in the gettemplatecontent AJAX handler, allowing unauthenticated attackers to retrieve private...

Elementor Website Builder - Remote Code Execution

The Elementor Website Builder plugin for WordPress versions 3.6.0 to 3.6.2 are vulnerable to unauthorized execution of several AJAX actions due to a missing capability check in the /core/app/modules/onboarding/module.php file. This makes it possible for attackers to modify site data and upload...