CVE-2024-30533 – WordPress Layouts for Elementor plugin < 1.8 - Arbitrary File Upload vulnerability

https://notcve.org/view.php?id=CVE-2024-30533

Unrestricted Upload of File with Dangerous Type vulnerability in Techeshta Layouts for Elementor.This issue affects Layouts for Elementor: from n/a before 1.8. Carga sin restricciones de archivos con vulnerabilidad de tipo peligroso en Techeshta Layouts for Elementor de WordPress. Este problema afecta a Layouts para Elementor: desde n/a antes de 1.8. The Layouts for Elementor plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the handle_import() function in all versions up to, and including, 1.7. This makes it possible for unauthenticated attackers to upload arbitrary files that can be used to achieve remote code execution. • https://patchstack.com/database/vulnerability/layouts-for-elementor/wordpress-layouts-for-elementor-plugin-1-8-arbitrary-file-upload-vulnerability?_s_id=cve • CWE-434: Unrestricted Upload of File with Dangerous Type CWE-862: Missing Authorization •