VDB
BDU%3A2023-06984
BDU%3A2023-06984
PUBLISHED
CVSS 10 CRITICAL
Уязвимость плагина Royal Elementor Addons and Templates системы управления содержимым сайта WordPress, позволяющая нарушителю выполнить произвольный код путем загрузки специально созданного файла
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| WordPress Foundation | Royal Elementor Addons and Templates | |
| Unknown | Royal Elementor Addons and Templates | 0 |
Timeline
- Oct 21, 2023 CVE Published
- Nov 28, 2023 PoC Published
- Feb 6, 2025 PoC Published
- Feb 23, 2025 PoC Published
- Apr 5, 2025 PoC Published
- Aug 31, 2025 PoC Published
- Oct 23, 2025 PoC Published
References
- https://securityonline.info/cve-2023-5360-wordpress-plugin-zero-day-affects-200k-sites/ url
- https://github.com/IRB0T/CVE-Scan/tree/main/CVE-2023-5360-Scan url
- https://wpscan.com/blog/unauthenticated-file-upload-vulnerability-addressed-in-royal-elementor-addons-and-templates-1-3-79/?text=restrict url
- https://www.cybersecurity-help.cz/vdb/SB2023101736 url
- https://wpscan.com/vulnerability/281518ff-7816-4007-b712-63aed7828b34 exploit
- http://packetstormsecurity.com/files/175992/WordPress-Royal-Elementor-Addons-And-Templates-Remote-Shell-Upload.html url