VDB

GSD-2023-5360

GSD-2023-5360 PUBLISHED

The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.

Affected Products

VendorProductVersions
UnknownRoyal Elementor Addons and Templates0

Timeline

  • Oct 21, 2023 CVE Published
  • Nov 28, 2023 PoC Published
  • Feb 6, 2025 PoC Published
  • Feb 23, 2025 PoC Published
  • Apr 5, 2025 PoC Published
  • Aug 31, 2025 PoC Published
  • Oct 23, 2025 PoC Published
Open in Interactive Console →
$ Console Community · 100/wk Open console ›