CVE-2023-5360
Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
10Exploited in Wild
-Decision
Descriptions
The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.
El complemento Royal Elementor Addons and Templates de WordPress anterior a 1.3.79 no valida correctamente los archivos cargados, lo que podría permitir a usuarios no autenticados cargar archivos arbitrarios, como PHP y lograr RCE.
The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.3.78. This is due to insufficient file type validation in the handle_file_upload() function called via AJAX which allows attackers to supply a preferred filetype extension to the 'allowed_file_types' parameter, with a special character, which makes it possible for the uploaded file to bypass their filter list. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
WordPress Royal Elementor Addons and Templates plugin versions prior to 1.3.79 suffer from a remote shell upload vulnerability.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2023-10-03 CVE Reserved
- 2023-10-09 CVE Published
- 2023-10-21 First Exploit
- 2024-08-02 CVE Updated
- 2024-11-06 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-434: Unrestricted Upload of File with Dangerous Type
CAPEC
References (12)
| URL | Tag | Source |
|---|---|---|
| http://packetstormsecurity.com/files/175992/WordPress-Royal-Elementor-Addons-And-Templates-Remote-Shell-Upload.html |
|
|
| https://vulners.com/nuclei/NUCLEI:CVE-2023-5360 |
| URL | Date | SRC |
|---|---|---|
| https://github.com/Chocapikk/CVE-2023-5360 | 2023-11-02 | |
| https://github.com/1337r0j4n/CVE-2023-5360 | 2023-11-21 | |
| https://github.com/tucommenceapousser/CVE-2023-5360 | 2023-11-10 | |
| https://github.com/angkerithhack001/CVE-2023-5360-PoC | 2023-12-27 | |
| https://github.com/phankz/Worpress-CVE-2023-5360 | 2023-11-30 | |
| https://github.com/sagsooz/CVE-2023-5360 | 2023-10-21 | |
| https://github.com/Pushkarup/CVE-2023-5360 | 2023-11-05 | |
| https://github.com/nastar-id/CVE-2023-5360 | 2023-10-26 | |
| https://github.com/Jenderal92/WP-CVE-2023-5360 | 2024-02-05 | |
| https://wpscan.com/vulnerability/281518ff-7816-4007-b712-63aed7828b34 | 2024-08-02 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Royal-elementor-addons Search vendor "Royal-elementor-addons" | Royal Elementor Addons Search vendor "Royal-elementor-addons" for product "Royal Elementor Addons" | < 1.3.79 Search vendor "Royal-elementor-addons" for product "Royal Elementor Addons" and version " < 1.3.79" | wordpress |
Affected
| ||||||