CVE-2023-5360

CVE-2023-5360 Elementor ファイルアップロードエクスプロイト Royal Elementor Addons and Templates WordPressプラグインのバージョン1.3.79以前では、アップロードされたファイルの検証が適切に行われないため、認証されていないユーザーがPHPなどの任意のファイルをアップロードし、リモートコード実行（RCE）を達成できる可能性があります。 root@kitploit: / / | / / / / / | | / / / / / | |/ /// / |// | \ / \ | / / // / / // / / 例:...

WordPress Royal Elementor Addons Plugin <= 1.3.78 - Arbitrary File Upload

Arbitrary File Upload vulnerability in WordPress Royal Elementor Addons Plugin. This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. This vulnerability has been fixed in version...

CVE-2023-5360

CVE-2023-5360 オープンソースのエクスプロイト Royal Elementor Addons and Templates WordPressプラグイン（バージョン1.3.79以前）はアップロードされたファイルを適切に検証しないため、認証されていないユーザーがPHPなどの任意のファイルをアップロードし、RCEを達成できる可能性があります。 Table of Contents はじめに 特徴 使い方 前提条件 インストール エクスプロイトの実行 結果とログ 免責事項 ライセンス 著者 寄付 はじめに このリポジトリには、Royal Elementor...

CVE-2023-5360

CVE-2023-5360 CVE-2023-5360 自动Shell上传 WordPress Royal Elementor 1.3.78 Shell上传...

CVE-2023-5360-exploit-with-native-libraries

Royal Elementor Addons ≤ 1.3.78 – 未認証の任意ファイルアップロード RCE 📌 概要 このリポジトリには、WordPressプラグイン Royal Elementor Addons and Templates （バージョン ≤ 1.3.78 ）用の修正された概念実証エクスプロイト が含まれています。 この脆弱性により、未認証での任意ファイルアップロード が可能となり、悪用することでPHPファイルをアップロードしてリモートコード実行（RCE）を達成できます。 CVE : CVE-2023-5360 脆弱性タイプ : 未認証ファイルアップロード → RCE...

WP-CVE-2023-5360

WP-CVE-2023-5360 Royal Elementor Addons and Templates = 1.3.78 – 未認証の任意ファイルアップロード Python 2.7 寄付 : Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC 使用方法 Python 2.7 をインストール ここからダウンロード python file.py 参照 :...

CVE-2026-13407

The Royal Elementor Addons WordPress plugin before 1.7.1067 does not properly sanitize and escape values submitted through its form widget before including them in the body of administrator notification emails, allowing unauthenticated attackers to inject arbitrary HTML into emails sent to the si...

EUVD-2026-80217

The Royal Elementor Addons WordPress plugin before 1.7.1067 does not properly sanitize and escape values submitted through its form widget before including them in the body of administrator notification emails, allowing unauthenticated attackers to inject arbitrary HTML into emails sent to the si...

CVE-2026-13407 Royal Elementor Addons < 1.7.1067 - Unauthenticated Stored HTML Injection in Form Notification Emails

The Royal Elementor Addons WordPress plugin before 1.7.1067 does not properly sanitize and escape values submitted through its form widget before including them in the body of administrator notification emails, allowing unauthenticated attackers to inject arbitrary HTML into emails sent to the si...

CVE-2026-13407

CVE-2026-13407 affects the Royal Elementor Addons WordPress plugin in versions before 1.7.1067 . The form widget does not properly sanitize and escape submitted values before including them in administrator notification emails, allowing unauthenticated attackers to inject arbitrary HTML into emai...

Worpress-CVE-2023-5360

CVE-2023-5360 CVE-2023-5360 自動シェルアップロード WordPress Royal Elementor 1.3.78 シェルアップロード Visit https://phankz.com...

CVE-2026-19226

Royal Addons for Elementor (WordPress plugin) versions before 1.7.1066 fail to validate certain Image Accordion Widget effect settings before outputting them inside an HTML attribute , enabling Stored Cross-Site Scripting (XSS) by authenticated users with the Contributor role or higher. The vulne...

CVE-2026-19226 Royal Elementor Addons < 1.7.1066 - Contributor+ Stored XSS via Image Accordion Widget Effect Settings

The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not validate some widget settings before outputting them inside an HTML attribute, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2026-13406

CVE-2026-13406 affects the Royal Addons for Elementor WordPress plugin in versions before 1.7.1066 . The root cause is the absence of any capability or nonce check before the plugin returns taxonomy term data for a caller-supplied taxonomy. This allows unauthenticated users to disclose the names ...

CVE-2026-13404 Royal Elementor Addons < 1.7.1066 - Unauthenticated Like Count and IP Meta Modification via wpr_likes_init

The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not perform any capability or ownership check relying only on a publicly-scrapeable nonce before writing like-count and visitor-tracking post meta keyed on an arbitrary post ID, allowing unauthenticated users to modify that...

CVE-2026-13404

CVE-2026-13404 affects the Royal Addons for Elementor WordPress plugin in versions prior to 1.7.1066 . The vulnerable function wpr_likes_init does not perform any capability or ownership check, relying solely on a publicly-scrapeable nonce before writing like-count and visitor-tracking post meta ...

CVE-2026-13406 Royal Elementor Addons < 1.7.1066 - Unauthenticated Taxonomy Term Disclosure

The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not perform any capability or nonce check before returning taxonomy term data for an arbitrary, caller-supplied taxonomy, allowing unauthenticated users to disclose the names and IDs of terms belonging to non-public taxonomies...

CVE-2026-13405

Royal Elementor Addons before 1.7.1066 fails to sanitize custom widget markup before writing it to an executed file. An attacker with manage_options capability (or non-super Multisite subsite admin) can inject arbitrary PHP code, achieving remote code execution. CVSS 6.6 MEDIUM. No exploitation o...

CVE-2026-13405 Royal Elementor Addons < 1.7.1066 - Admin+ Remote Code Execution via Widget Builder

The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not correctly sanitise custom widget markup before writing it to a file that is later executed, allowing users with the manageoptions capability and, on WordPress Multisite, non-super subsite administrators who do not otherwise...

CVE-2026-17123

The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.7.1064 via the Form Builder widget's 'webhookurl' setting. The widget's render method persists the attacker-controlled URL into the wprwebhookurlwidgetid option on ever...