Elementor Website Builder 3.6.0 - 3.6.2 - Missing Authorization to Remote Code Execution
100Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actcvss 8.8epss 93%
de la publicación al arma794 días
Publicada en NVD19 abr
1ª PoC+794d
metasploit29 mar
VulnCheck13 abr
probabilidad de explotación
93%top 1% de las CVE
explotación observada
síVulnCheck
1 exploit(s) público(s)
The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized execution of several AJAX actions due to a missing capability check in the ~/core/app/modules/onboarding/module.php file that make it possible for attackers to modify site data in addition to uploading malicious files that can be used to obtain remote code execution, in versions 3.6.0 to 3.6.2.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
elemntor · Elementor Website BuilderPoCs públicas encontradas — 1
vulncheckvulncheck.com/xdb/0f5c17f7f62eno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://packetstormsecurity.com/files/168615/WordPress-Elementor-3.6.2-Shell-Upload.htmlhttps://plugins.trac.wordpress.org/changeset/2708766/elementor/trunk/core/app/modules/onboarding/module.phphttps://www.pluginvulnerabilities.com/2022/04/12/5-million-install-wordpress-plugin-elementor-contains-authenticated-remote-code-execution-rce-vulnerability/https://www.wordfence.com/blog/2022/04/elementor-critical-remote-code-execution-vulnerability/