VDB
CVE-2023-5360
CVE-2023-5360
PUBLISHED
KEV
CVSS 9.800000190734863 CRITICAL
The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.
EPSS 86.35% · 99.7th percentile
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
86.35%
99.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Royal Elementor Addons and Templates | 0, 0 |
| royal-elementor-addons | royal_elementor_addons | 0, 0, 0 |
Timeline
- CVE Published
- Jan 20, 1970 VulnCheck XDB Entry
- Jan 20, 1970 VulnCheck XDB Entry
- Jan 20, 1970 VulnCheck XDB Entry
- Jan 20, 1970 VulnCheck XDB Entry
- Jan 20, 1970 VulnCheck XDB Entry
- Jan 21, 1970 VulnCheck XDB Entry
- Jan 21, 1970 VulnCheck XDB Entry
- Sep 21, 2022 CrowdSec Sighting
- Jun 27, 2023 CrowdSec Sighting
- Jul 3, 2023 CrowdSec Sighting
- Aug 10, 2023 CrowdSec Sighting