CVE-2023-5360
Assigner: WPScan
Published: 2023-10-31T13:54:42.111Z
State: PUBLISHED
title: Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload
problemTypes: descriptions: description: CWE-434 Unrestricted Upload of File with Dangerous Type
type: CWE
affected: vendor: Unknown
product: Royal Elementor Addons and Templates
versions: status: affected
versionType: custom
version: 0
lessThan: 1.3.79
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
descriptions: value: The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.
credits: value: Fioravante Souza
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator