Elementor Pro < 2.9.4 - Authenticated Arbitrary File Upload

🗓️ 07 May 2020 00:00:00Reported by wpvulndbType

Elementor Pro < 2.9.4 - Authenticated Arbitrary File Upload vulnerability exploiting blog's PHP executio

Reporter	Title	Published	Views	Family All 10
Patchstack	WordPress Elementor Pro premium plugin <= 2.9.3 - Authenticated Arbitrary File Upload vulnerability	6 May 202000:00	–	patchstack
wpexploit	Elementor Pro < 2.9.4 - Authenticated Arbitrary File Upload	7 May 202000:00	–	wpexploit
Cvelist	CVE-2020-13126	17 May 202000:38	–	cvelist
Cvelist	CVE-2020-13125	17 May 202000:39	–	cvelist
NVD	CVE-2020-13125	17 May 202001:15	–	nvd
NVD	CVE-2020-13126	17 May 202001:15	–	nvd
CVE	CVE-2020-13126	17 May 202001:15	–	cve
CVE	CVE-2020-13125	17 May 202001:15	–	cve
Prion	Design/Logic Flaw	17 May 202001:15	–	prion
Prion	Remote code execution	17 May 202001:15	–	prion

Vulners

Node

-elementor-proRange<2.9.4

Source	Link
blog	www.blog.nintechnet.com/zero-day-vulnerability-exploited-in-elementor-pro/
wordfence	www.wordfence.com/blog/2020/05/combined-attack-on-elementor-pro-and-ultimate-addons-for-elementor-puts-1-million-sites-at-risk/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

07 May 2020 00:00Current

0.1Low risk

Vulners AI Score0.1

EPSS0.003